PT-2026-134687
CVE-2026-120246
·
Published
2026-11-01
·
Updated
2026-11-01
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
FFmpeg 4.4 through 9.0.2 contains a use of uninitialized variable vulnerability in the CDXL decoder that leaks stack memory into decoded pixels via unfilled HAM palette entries. Attackers can craft a type-0 CDXL file whose HAM pixels select unfilled new palette entries in cdxl decode ham8() or cdxl decode ham6(), exposing stack bytes and pointer fragments in the BGR24 output.
Found an issue in the description? Have something to add? Feel free to write us 👾