UBUNTU-CVE-2026-125264: Medium severity ubuntu/ffmpeg vulnerability
FFmpeg through 9.0.2 contains an uncontrolled resource consumption vulnerability in parseframeheader() in libavcodec/jpegxlparser.c that fails to validate TOC entry counts against remaining input. Attackers can supply a crafted JPEG XL frame header with a permuted TOC and huge toccount, making the parser loop excessively and exhaust CPU.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to trigger the issue?
An attacker needs to get a crafted JPEG XL frame header processed by the affected FFmpeg parser. The vector is local and requires user interaction, while no privileges are required.
What is the expected impact of successful exploitation?
The crafted header can cause excessive looping in parse_frame_header() and exhaust CPU resources. The reported impact is availability loss; no confidentiality or integrity impact is indicated.
Which input characteristics indicate an exploit attempt?
The relevant input is a JPEG XL frame header with a permuted TOC and an unusually large toc_count. The issue occurs when TOC entry counts are not validated against the remaining input.