Threats tagged 'ghsa-5crp-5fhv-76vj'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.8	CVE-2026-125266FFmpeg through 9.0.2 contains an uninitialized stack memory disclosure vulnerability in old_codec23() of Medium4.82026-11-09GCVE DatabaseCVE-2026-125266 FFmpeg versions through 9.0.2 have a low-severity vulnerability in the old_codec23() function of libavcodec/sanm.c that causes uninitialized stack memory to be leaked into decoded video frames. This occurs when processing crafted LucasArts SMUSH/SANM animations using codec 23 with an inline table, potentially exposing sensitive decoder stack memory in the output video. Report on CVE-2026-125266 Vulnerability CWE-908 #ghsa-5crp-5fhv-76vj	GCVE Database	2026-11-09

Page 1 of 1