Threats tagged 'ghsa-rhrp-rq7x-qmc3'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.8	CVE-2026-125243FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in ff_jpegls_decode_picture() in Medium4.82026-11-09GCVE DatabaseCVE-2026-125243 FFmpeg versions through 9.0.2 have a low-severity vulnerability in the ff_jpegls_decode_picture() function of libavcodec/jpeglsdec.c. This flaw involves uninitialized memory disclosure when decoding certain crafted single-component JPEG-LS images with the ILV byte set to 1, leading to exposure of leftover heap memory in decoded GRAY16 frames. Report on CVE-2026-125243 Vulnerability CWE-908 #ghsa-rhrp-rq7x-qmc3	GCVE Database	2026-11-09

Page 1 of 1