UBUNTU-CVE-2026-125246: Medium severity ubuntu/ffmpeg vulnerability

Published Nov 10, 2026

Updated

FFmpeg through 9.0.2 contains a denial of service vulnerability in cbsjpegassemblefragment() that miscounts 0xff stuffing bytes in JPEG scan headers. Attackers can supply a crafted JPEG/MJPEG stream with 0xff in the scan header, triggering an avassert0 abort when CBS-based bitstream filters process it.

Affected Software

7 affected components

ubuntu/ffmpeg*

Event History

Nov 10, 2026

CVE Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which FFmpeg workflows are exposed to this denial of service?

The issue is triggered when CBS-based bitstream filters process a crafted JPEG or MJPEG stream. Workflows that do not process attacker-controlled JPEG/MJPEG input through those filters are not described as affected.

What must an attacker provide to trigger the crash?

An attacker must supply a crafted JPEG/MJPEG stream containing 0xff bytes in the JPEG scan header. Processing that stream through an affected CBS-based bitstream filter can trigger an av_assert0 abort.

What is the impact if exploitation succeeds?

The described impact is a denial of service caused by an abort in FFmpeg. The supplied information does not describe confidentiality or integrity impact.

UBUNTU-CVE-2026-125246: Medium severity ubuntu/ffmpeg vulnerability

Affected Software

Event History

Frequently Asked Questions

Which FFmpeg workflows are exposed to this denial of service?

What must an attacker provide to trigger the crash?

What is the impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

Which FFmpeg workflows are exposed to this denial of service?

What must an attacker provide to trigger the crash?

What is the impact if exploitation succeeds?