UBUNTU-CVE-2026-125070: Integer Overflow

Published Nov 10, 2026

Updated

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in tqidecodeframe() in libavcodec/eatqi.c, which ignores initgetbits() failure after an integer overflow. Attackers can supply a crafted EA file with a pIQT chunk carrying a 2^28-byte payload to crash the process, causing denial of service.

Affected Software

7 affected components

ubuntu/ffmpeg*

Event History

Nov 10, 2026

CVE Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What access and interaction are required for exploitation?

The attack vector is local and requires user interaction. An attacker would need to get a crafted file processed in a context where a user triggers handling of it.

Does this issue affect confidentiality or integrity?

The provided impact metrics indicate no confidentiality or integrity impact. The stated effect is loss of availability through a process crash.

UBUNTU-CVE-2026-125070: Integer Overflow

Affected Software

Event History

Frequently Asked Questions

What access and interaction are required for exploitation?

Does this issue affect confidentiality or integrity?

Company

Resources

Contact

Frequently Asked Questions

What access and interaction are required for exploitation?

Does this issue affect confidentiality or integrity?