CVE-2026-120246 | FFmpeg up to 9.0.2 CDXL decoder cdxl_decode_ham8/cdxl_decode_ham6 uninitialized resource

November 1, 2026 Yanac

A vulnerability has been found in FFmpeg up to 9.0.2 and classified as problematic. This affects the function cdxl_decode_ham8/cdxl_decode_ham6 of the component CDXL decoder. This manipulation causes uninitialized resource.

This vulnerability is tracked as CVE-2026-120246. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More