Bug 2570108 (CVE-2026-125193) - CVE-2026-125193 ffmpeg: ffmpeg: Denial of Service via out-of-bounds read in bitpacked decoder
Summary: CVE-2026-125193 ffmpeg: ffmpeg: Denial of Service via out-of-bounds read in b...
Keywords:
Status: NEW
Alias: CVE-2026-125193
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-11-10 19:36 UTC by OSIDB Bzimport
Modified: 2026-11-10 21:03 UTC (History)
1 user (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-11-10 19:36:51 UTC 
FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in bitpacked_decode_uyvy422() in libavcodec/bitpacked_dec.c because it never verifies packets hold width * height * 2 bytes. Attackers can supply truncated bitpacked UYVY422 packets via crafted SDP/RFC 4175 RTP sessions or raw input to crash applications or expose adjacent heap memory.
Note You need to log in before you can comment on or make changes to this bug.