UBUNTU-CVE-2026-125216: Null Pointer Dereference

Published Nov 10, 2026

Updated

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in libavcodec/dpxenc.c that allows attackers to crash the process via unvalidated bitsperrawsample for RGB48 input. Attackers can supply a 12-bit RGB image, such as JPEG 2000, that when transcoded to DPX selects encodegbrp12() and dereferences NULL plane pointers, causing denial of service.

Affected Software

7 affected components

ubuntu/ffmpeg*

Event History

Nov 10, 2026

CVE Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What input and processing path are required to trigger the crash?

An attacker needs to supply a 12-bit RGB image, such as a JPEG 2000 image, that is transcoded to DPX. This causes FFmpeg to select encode_gbrp12() for RGB48 input and dereference NULL plane pointers.

What is the practical impact of successful exploitation?

Successful exploitation crashes the FFmpeg process, resulting in denial of service. The provided data does not describe confidentiality or integrity impact.

Which deployments are most exposed?

Deployments that accept attacker-controlled image files and transcode them to DPX are exposed to the described attack path. The issue affects FFmpeg through version 9.0.2.

UBUNTU-CVE-2026-125216: Null Pointer Dereference

Affected Software

Event History

Frequently Asked Questions

What input and processing path are required to trigger the crash?

What is the practical impact of successful exploitation?

Which deployments are most exposed?

Company

Resources

Contact

Frequently Asked Questions

What input and processing path are required to trigger the crash?

What is the practical impact of successful exploitation?

Which deployments are most exposed?