UBUNTU-CVE-2026-125266: Medium severity ubuntu/ffmpeg vulnerability
FFmpeg through 9.0.2 contains an uninitialized stack memory disclosure vulnerability in oldcodec23() of libavcodec/sanm.c that leaks stack bytes into decoded frames. Attackers can supply a crafted LucasArts SMUSH/SANM animation using codec 23 with an inline table to expose decoder process stack memory in output video.
Affected Software
Event History
Frequently Asked Questions
What must an attacker provide to trigger the disclosure?
The attacker must supply a crafted LucasArts SMUSH/SANM animation that uses codec 23 with an inline table. The vulnerable decoder can then leak uninitialized stack bytes into decoded video frames.
Is user interaction required for exploitation?
Yes. The vector indicates user interaction is required, so a target would need to open or otherwise cause processing of the crafted SANM animation.
What is exposed if exploitation succeeds?
The issue affects confidentiality: stack memory from the decoder process may be disclosed through the output video frames. The provided impact data does not indicate integrity or availability impact.