Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 11 Nov 2026 01:26:21 +0000 CVE-2026-125098 — FFmpeg through 9.0.2 WebP Decoder Information Disclosure via Short ALPH Chunk https://db.gcve.eu/vuln/cve-2026-125098 <p><strong>Affected:</strong> FFmpeg</p> <p>FFmpeg through 9.0.2 contains an information disclosure vulnerability in vp8_lossy_decode_alpha() in libavcodec/webp.c that leaves alpha plane memory uninitialized for short uncompressed ALPH chunks. Attackers can supply a crafted WebP image whose ALPH chunk is shorter than width * height to disclose stale pixel data from previously decoded frames.</p> <p><strong>Affected:</strong> FFmpeg</p> <p>FFmpeg through 9.0.2 contains an information disclosure vulnerability in vp8_lossy_decode_alpha() in libavcodec/webp.c that leaves alpha plane memory uninitialized for short uncompressed ALPH chunks. Attackers can supply a crafted WebP image whose ALPH chunk is shorter than width * height to disclose stale pixel data from previously decoded frames.</p> https://db.gcve.eu/vuln/cve-2026-125098