Bug 2564505 (CVE-2026-120243) - CVE-2026-120243 ffmpeg: ffmpeg: information disclosure via crafted Go2Meeting stream
Summary: CVE-2026-120243 ffmpeg: ffmpeg: information disclosure via crafted Go2Meeting...
Keywords:
Status: NEW
Alias: CVE-2026-120243
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2564969 2564970 2564972 2564973 2564974 2564977 2564980 2564982 2564984 2564986 2564989 2564993 2564996 2565000 2565003 2565006 2565009
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-11-01 01:02 UTC by OSIDB Bzimport
Modified: 2026-11-02 10:31 UTC (History)
1 user (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-11-01 01:02:45 UTC 
FFmpeg 2.0 through 9.0.2 contains a use of uninitialized variable vulnerability in the Go2Meeting decoder that allows attackers to leak stack memory through out-of-range palette indices. Attackers can craft a G2M3/G2M4 stream with a short Kempf palette so kempf_restore_buf() copies uninitialized stack bytes, including pointers or stack guards, into decoded output.
Note You need to log in before you can comment on or make changes to this bug.