CVE-2026-120243

    Dashboard / Vulnerabilities / CVE-2026-120243

    CVE-2026-120243

    Published: 1 Nov 2026Last Modified: 8 Nov 2026

    Summary: FFmpeg 2.0 through 9.0.2 Information Disclosure via G2M Kempf Palette

    Details: FFmpeg 2.0 through 9.0.2 contains a use of uninitialized variable vulnerability in the Go2Meeting decoder that allows attackers to leak stack memory through out-of-range palette indices. Attackers can craft a G2M3/G2M4 stream with a short Kempf palette so kempf_restore_buf() copies uninitialized stack bytes, including pointers or stack guards, into decoded output.

    References: https://code.ffmpeg.org/FFmpeg/FFmpeg, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/120xxx/CVE-2026-120243.json, https://nvd.nist.gov/vuln/detail/CVE-2026-120243, https://www.vulncheck.com/advisories/ffmpeg-2.0-through-9.0.2-information-disclosure-via-g2m-kempf-palette, https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24858, https://github.com/FFmpeg/FFmpeg/commit/edad2d0dafcf44fa315eab716fd0183ce808053b, https://github.com/FFmpeg/FFmpeg, https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/g2meet.c#L1040-L1042

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 2b8b2ba19fe0ca6594cb09439b9ead2c328a79d8
    Fixed -edad2d0dafcf44fa315eab716fd0183ce808053b

    Affected versions

    n9.1-dev

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High