PT-2026-68787 · FFmpeg · Ffmpeg
CVSS v4.0
6.8
Medium
| Vector | AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
FFmpeg versions 0.5 through 8.x
Description
An uninitialized heap memory disclosure exists in the native TIFF decoder within libavcodec/tiff.c. An attacker can exploit this by providing a crafted TIFF file containing a valid Deflate-compressed strip that produces fewer bytes than declared. The
tiff unpack zlib() function allocates a heap buffer for the full declared strip but uses memcpy() to copy all declared rows regardless of the actual bytes decompressed by zlib. This process incorporates unwritten bytes containing stale data from previous heap allocations into the decoded image output, which may expose sensitive information in persistent services.Recommendations
Update FFmpeg to version 9.0 or later.
Exploit
Fix
Use of Uninitialized Resource
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ffmpeg