CVE-2026-70629— FFmpeg 资源管理错误漏洞

FFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in RSCC Decoder

FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native RSCC decoder (libavcodec/rscc.c) that allows attackers to disclose heap memory contents by supplying a crafted video file with a compressed tile that decompresses fewer bytes than the declared tile geometry requires. When rscc_decode_frame() calls av_image_copy_plane() without validating the decompressed byte count against the tile dimensions, the unwritten suffix of the persistent intermediate buffer ctx->inflated_buf is copied into the decoded frame, potentially exposing data from prior heap allocations or previous decoded frames in persistent decoding services.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

对未经初始化资源的使用

FFmpeg 资源管理错误漏洞

FFmpeg是FFmpeg组织开源的一个多媒体处理框架。 FFmpeg 3.0版本至9.0之前版本存在资源管理错误漏洞，该漏洞源于RSCC解码器（libavcodec/rscc.c）未验证解压字节数与图块尺寸，导致未初始化堆内存读取，攻击者可通过提供特制视频文件泄露堆内存内容。

N/A

N/A