6.1Media
CVE-2026-125261FFmpeg through 9.0.2 SGI Encoder Out-of-Bounds Read via sgienc.c
Descripción
FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the SGI encoder's encode_frame() in libavcodec/sgienc.c, where unsigned size variables mis-handle negative linesize frames. Attackers can supply a video whose display matrix triggers autorotate vflip, so transcoding to SGI images reads pixel data far outside the frame and crashes the process.
Debilidad (CWE):
CWE-125
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
Referencias y parches
- https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/25690 issue-tracking
- Patch Commit patch
- https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/sgienc.c#L208 technical-description
- https://github.com/FFmpeg/FFmpeg product
- VulnCheck Advisory: FFmpeg through 9.0.2 SGI Encoder Out-of-Bounds Read via sgienc.c third-party-advisory