UBUNTU-CVE-2026-125065: Null Pointer Dereference
FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in tgvdecodeinter() in libavcodec/eatgv.c that ignores initgetbits() failure on oversized packets. Attackers can supply a crafted EA file with a kVGT frame followed by an fVGT inter frame with a 2^28-byte compressed block section, crashing the process for denial of service.
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Systems that use FFmpeg to process EA files are exposed when an attacker can cause a crafted EA file to be decoded. The impact described is a crash of the FFmpeg-using process, resulting in denial of service.
What does an attacker need to exploit it?
An attacker needs to supply a crafted EA file containing a kVGT frame followed by an fVGT inter frame with a 2^28-byte compressed block section. The provided vector indicates local attack access and user interaction is required.
How can I determine whether an affected system may be vulnerable?
Check whether the installed Ubuntu FFmpeg version is through 9.0.2 and whether the environment processes untrusted EA files. A crash while decoding the specified crafted frame sequence is the described symptom.