UBUNTU-CVE-2026-125102: Medium severity ubuntu/ffmpeg vulnerability
FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in takdecodeframe() in libavcodec/takdec.c that fails to verify multichannel decorrelation lists cover every channel. Attackers can supply crafted multichannel TAK files omitting channels from the list, causing undecoded sample buffers to leak heap memory through decoded audio.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems using FFmpeg to decode untrusted multichannel TAK audio files are exposed. Exploitation requires a user to interact with a crafted file.
What does an attacker need to provide?
The attacker needs to supply a crafted multichannel TAK file whose decorrelation list omits one or more channels. When FFmpeg decodes it, undecoded sample buffers may disclose heap memory through the audio output.
What is the impact of successful exploitation?
Successful exploitation can disclose heap memory contents through decoded audio. The provided severity vector indicates confidentiality impact only; no integrity or availability impact is listed.
How can I determine whether a file may trigger the issue?
Inspect multichannel TAK inputs for decorrelation lists that do not cover every channel. Such files match the malformed condition described for the vulnerable decoder.