UBUNTU-CVE-2026-125170: Medium severity ubuntu/ffmpeg vulnerability
FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in targadecoderle() in libavcodec/targa.c caused by missing packet length checks. Attackers can supply truncated RLE-compressed TGA images so decoded frames contain leftover heap buffer data and replicated uninitialized stack bytes.
Affected Software
Event History
Frequently Asked Questions
What must an attacker do to exploit this issue?
An attacker must cause FFmpeg to decode a truncated RLE-compressed TGA image. Exploitation requires user interaction, such as opening or processing attacker-supplied image content.
What information could be exposed?
Decoded frames may contain leftover heap-buffer data and replicated uninitialized stack bytes. The reported impact is limited to confidentiality; no integrity or availability impact is listed.
Which FFmpeg versions are affected?
The issue is reported in FFmpeg through version 9.0.2. The provided data does not identify Ubuntu package versions containing a fix.