UBUNTU-CVE-2026-125178: Medium severity ubuntu/ffmpeg vulnerability
Published Nov 10, 2026
·Updated
FFmpeg through 9.0.2 contains an out-of-bounds heap read vulnerability in tdscloadcursor() in libavcodec/tdsc.c, which stores cursor dimensions before validating them. Attackers can supply a crafted AVI file with oversized TDSC cursor dimensions so tdscpaintcursor() reads past the cursor buffer, crashing the decoder or leaking heap memory into frames.
Affected Software
7 affected components
ubuntu/ffmpeg*
ubuntu/ffmpeg*
ubuntu/ffmpeg*
ubuntu/ffmpeg*
ubuntu/ffmpeg*
ubuntu/ffmpeg*
ubuntu/ffmpeg*
Event History
Nov 10, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Does exploitation require an attacker to have local privileges on the affected system?
No. The vulnerability is rated PR:N, indicating that no privileges are required, but the attack vector is local and requires user interaction.
2
What security impact is indicated by the severity vector?
The vector indicates low confidentiality impact and high availability impact. It indicates no integrity impact and no impact on a subsequent system.