UBUNTU-CVE-2026-120457: Medium severity ubuntu/libaec vulnerability
libaec through 1.1.7 contains an out-of-bounds read vulnerability in msedecode() in src/decode.c that allows attackers to bypass a signed bounds check via an overlong fundamental sequence. Attackers can supply a crafted CCSDS 121.0/SZIP stream with 2^31 or more zero bits to crash the decoder or leak adjacent memory into decoded samples.
Affected Software
Event History
Frequently Asked Questions
Does exploitation require authenticated or privileged access?
No privileges are required. Exploitation is rated local and requires user interaction, with high attack complexity.
Which deployments are realistically exposed?
Deployments are exposed when libaec decodes attacker-controlled CCSDS 121.0/SZIP streams. The affected code is m_se_decode() in src/decode.c, and the issue applies through libaec 1.1.7.
What is the practical impact of successful exploitation?
A crafted stream containing 2^31 or more zero bits can crash the decoder, affecting availability. It may also cause adjacent memory to be leaked into decoded samples, affecting confidentiality.