Threats tagged 'ghsa-76cq-jhfp-r489'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.8	CVE-2026-120246FFmpeg 4.4 through 9.0.2 contains a use of uninitialized variable vulnerability in the CDXL decoder that leaks stack Medium6.82026-11-01GCVE DatabaseCVE-2026-120246 FFmpeg versions 4.4 through 9.0.2 have a vulnerability in the CDXL decoder where uninitialized variables lead to leakage of stack memory into decoded pixel data. This occurs via unfilled HAM palette entries, allowing crafted CDXL files to expose stack bytes and pointer fragments in the output. Report on CVE-2026-120246 Vulnerability CWE-457 #ghsa-76cq-jhfp-r489	GCVE Database	2026-11-01

Page 1 of 1