CVE-2026-125096 · Package
NO FIX YET · SEE WHAT TO DO
FFmpeg's Tiertex SEQ decoder copies an uninitialized 64-byte stack block into decoded frames when RLE unpacking fails. An attacker who supplies a crafted SEQ file can read stack contents in the visible output.
first public Nov 9, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Systems that decode Tiertex SEQ files with FFmpeg's libavcodec, especially when the files come from untrusted sources such as uploads or conversion services. Systems that never decode SEQ files are unlikely to be exposed. The sources do not say whether the default build enables this decoder.
Not affected if no-untrusted-media, seq-decoder-unused
Who cares ffmpeg, libavcodec, media-processing
ffmpeg -version; the sources say the flaw affects releases through 9.0.2.FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in libavcodec/tiertexseqv.c that allows attackers to leak stack contents by triggering failed RLE unpacking. Attackers can supply a crafted Tiertex SEQ file so seq_decode_op1() copies an uninitialized 64-byte stack block into decoded frames, exposing stack memory in visible output.
This page as .md · .json · CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.