CVE-2026-125193

Description

FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in bitpacked_decode_uyvy422() in libavcodec/bitpacked_dec.c because it never verifies packets hold width * height * 2 bytes. Attackers can supply truncated bitpacked UYVY422 packets via crafted SDP/RFC 4175 RTP sessions or raw input to crash applications or expose adjacent heap memory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/25702 ↗
• https://github.com/FFmpeg/FFmpeg/commit/f1205ee01893a3b509d96b5fe3aeda755c517973 ↗
• https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/bitpacked_dec.c#L52 ↗
• https://github.com/FFmpeg/FFmpeg ↗
• https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-out-of-bounds-read-via-bitpacked-decode-uyvy422 ↗