Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 10 Nov 2026 06:48:54 +0000 CVE-2026-125243 — FFmpeg through 9.0.2 Uninitialized Memory Disclosure via JPEG-LS Decoder https://db.gcve.eu/vuln/cve-2026-125243 <p><strong>Affected:</strong> FFmpeg</p> <p>FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in ff_jpegls_decode_picture() in libavcodec/jpeglsdec.c, which decodes 16-bit line-interleaved JPEG-LS scans as 8-bit samples. Attackers can supply a crafted single-component JPEG-LS image with the ILV byte set to 1, causing decoded GRAY16 frames to expose leftover heap memory.</p> <p><strong>Affected:</strong> FFmpeg</p> <p>FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in ff_jpegls_decode_picture() in libavcodec/jpeglsdec.c, which decodes 16-bit line-interleaved JPEG-LS scans as 8-bit samples. Attackers can supply a crafted single-component JPEG-LS image with the ILV byte set to 1, causing decoded GRAY16 frames to expose leftover heap memory.</p> https://db.gcve.eu/vuln/cve-2026-125243