Bug 2564503 (CVE-2026-120245)
| Summary: | CVE-2026-120245 ffmpeg: ffmpeg: Information disclosure via crafted Sun Raster image | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | bbrownin |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in FFmpeg. An attacker could exploit this vulnerability by tricking a user or automated system into processing a specially crafted Sun Raster image file. Because the decoder fails to properly initialize memory buffers when handling truncated image data, uninitialized system memory is copied into the decoded image output. Successful exploitation allows an attacker to obtain sensitive information from heap memory.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2564976, 2564978, 2564981, 2564983, 2564985, 2564987, 2564990, 2564992, 2564995, 2564999, 2565002, 2565007, 2565010, 2565011, 2565016, 2565019, 2565023 | ||
| Bug Blocks: | |||
|
Description
OSIDB Bzimport
2026-11-01 01:02:37 UTC
|