UBUNTU-CVE-2026-125100: Integer Overflow
FFmpeg through 9.0.2 contains an integer overflow vulnerability in the OpenEXR decoder's decodeframe() in libavcodec/exr.c that miscalculates the tiled block count. Attackers can supply a crafted tiled OpenEXR image with large dimensions and small tiles to skip decoding and disclose uninitialized memory or stale frame data.
Affected Software
Event History
Frequently Asked Questions
What must an attacker provide to trigger this issue?
An attacker must provide a crafted tiled OpenEXR image with large image dimensions and small tile sizes. Exploitation requires user interaction, consistent with the UI:P vector.
What information could be exposed?
The decoder may skip decoding because of the tiled block-count integer overflow, which can disclose uninitialized memory or stale frame data. The reported impact is limited to confidentiality; integrity and availability impacts are not indicated.
Is remote exploitation indicated?
No. The attack vector is local (AV:L), so the vulnerable FFmpeg component must process the crafted image in a local context.