UBUNTU-CVE-2026-125072: Integer Overflow
FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in mpdecodeframe() in libavcodec/mpegaudiodectemplate.c because initgetbits() failure is ignored after a signed integer overflow. Attackers can pass an oversized packet to the mp3adu decoder through the libavcodec API, causing reads through a NULL buffer that crash the process.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Applications on Ubuntu that use FFmpeg's libavcodec API and invoke the mp3adu decoder may be exposed. The described impact is a process crash rather than loss of confidentiality or integrity.
What does an attacker need to exploit it?
An attacker needs to provide an oversized packet to the mp3adu decoder through the libavcodec API. Exploitation also requires user interaction and has high attack complexity according to the supplied vector.
Are systems using the default FFmpeg configuration affected?
The provided information does not state whether the mp3adu decoder is enabled or used by default. Exposure depends on whether an application processes attacker-influenced input with that decoder.
What can be done if patching is not immediately possible?
Avoid passing untrusted or oversized packets to the mp3adu decoder through libavcodec. Restrict or disable processing paths that use the mp3adu decoder where operationally feasible.
How can I determine whether an application is affected?
Identify applications using Ubuntu's FFmpeg package and check whether they call libavcodec to decode MP3 ADU content with the mp3adu decoder. Review whether those applications can receive oversized packets from untrusted sources.