UBUNTU-CVE-2026-125068: Null Pointer Dereference

Published Nov 10, 2026

Updated

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Bink video decoder because decodeframe() in libavcodec/bink.c ignores initgetbits() failure. Attackers can supply a crafted Bink file with a frame of about 2^28 bytes, overflowing the bit count and crashing the process for denial of service.

Affected Software

7 affected components

ubuntu/ffmpeg*

Event History

Nov 10, 2026

CVE Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What conditions are required to trigger the crash?

An attacker must provide a crafted Bink video file containing a frame of approximately 2^28 bytes. The vulnerable process must attempt to decode that file using the affected Bink decoder.

Is this a remote code execution issue?

The provided impact information identifies process availability as affected, with no impact to confidentiality or integrity. The described outcome is a denial-of-service crash caused by a NULL pointer dereference.

What can be done before an update is available?

Avoid decoding untrusted Bink files, particularly files that may contain exceptionally large frames. Restrict or isolate workloads that process attacker-controlled media so a decoder crash does not disrupt other services.

UBUNTU-CVE-2026-125068: Null Pointer Dereference

Affected Software

Event History

Frequently Asked Questions

What conditions are required to trigger the crash?

Is this a remote code execution issue?

What can be done before an update is available?

Company

Resources

Contact

Frequently Asked Questions

What conditions are required to trigger the crash?

Is this a remote code execution issue?

What can be done before an update is available?