UBUNTU-CVE-2026-125268: Medium severity ubuntu/ffmpeg vulnerability
FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in the CineForm HD decoder that allows attackers to leak heap memory via unzeroed idwttmp buffers in libavcodec/cfhd.c. Attackers can supply a crafted CFHD file with an ImageHeight tag exceeding coded band heights, causing uninitialized heap bytes to be filtered into decoded video output.
Affected Software
Event History
Frequently Asked Questions
What input is required to trigger the issue?
An attacker must provide a crafted CineForm HD (CFHD) file with an ImageHeight tag that exceeds the coded band heights. The issue is triggered when FFmpeg decodes that file.
Does exploitation require prior access or user interaction?
The vector is local and no privileges are required. User interaction is required, consistent with a user or local workflow opening or processing an attacker-supplied CFHD file.
What is the impact of successful exploitation?
Successful exploitation can disclose uninitialized heap memory by causing unzeroed idwt_tmp buffer contents to be included in decoded video output. The provided impact data indicates confidentiality impact only, with no integrity or availability impact.