UBUNTU-CVE-2026-125259: Integer Overflow
FFmpeg through 9.0.2 contains an integer overflow vulnerability in ffproreskostyaencodeinit() that miscalculates framesizeupperbound using 32-bit arithmetic for large frame dimensions. Attackers can supply a high-resolution video transcoded with the proresks encoder, causing encodeframe() to write slices past an undersized packet buffer and corrupt heap memory.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems using FFmpeg to transcode attacker-supplied high-resolution video with the prores_ks encoder are exposed. The issue affects FFmpeg through version 9.0.2.
What does an attacker need to exploit it?
An attacker needs to provide a video with large frame dimensions that is processed using the prores_ks encoder. The supplied CVSS vector indicates local attack vector, no privileges required, and user interaction is required.
What is the impact of successful exploitation?
The integer overflow can cause encode_frame() to write past an undersized packet buffer, corrupting heap memory. The reported impact includes high confidentiality, integrity, and availability impact.