CVE-2026-125243 | FFmpeg up to 9.0.2 JPEG-LS Decoder libavcodec/jpeglsdec.c ff_jpegls_decode_picture uninitialized pointer

A vulnerability was found in FFmpeg up to 9.0.2. It has been rated as problematic. Affected by this issue is the function ff_jpegls_decode_picture of the file libavcodec/jpeglsdec.c of the component JPEG-LS Decoder. Performing a manipulation results in uninitialized pointer.

This vulnerability is known as CVE-2026-125243. Attacking locally is a requirement. No exploit is available.VulDB Recent EntriesRead More