---
id: "CVE-2026-125102"
page: "https://infrastack.ai/live/CVE-2026-125102"
kind: "vulnerability"
aliases: ["CVE-2026-125102"]
title: "FFmpeg: crafted TAK audio file leaks uninitialized heap memory through decoded audio"
severity: "medium"
cvss: 4.8
epss: null
exploited: false
status: "open"
category: "runtime"
products: []
ecosystems: []
tags: ["ffmpeg", "libavcodec", "media-processing", "runtime"]
not_affected_if: ["no-tak-decoding", "trusted-input-only"]
published_at: "2026-11-09T19:16:51+00:00"
first_seen_at: "2026-11-09T19:28:16+00:00"
updated_at: "2026-11-09T19:32:27+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-125102", "first_seen_at": "2026-11-09T19:28:16+00:00"}]
exploit_sources: []
---

# FFmpeg: crafted TAK audio file leaks uninitialized heap memory through decoded audio

Link for people: https://infrastack.ai/live/CVE-2026-125102 (this .md is for agents)

FFmpeg through 9.0.2 fails to check that multichannel decorrelation lists in TAK audio files cover every channel. A crafted file can leave some sample buffers undecoded, so heap memory leaks into the decoded audio output.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Run `ffmpeg -version` and compare against the fixed version (unknown from the sources given)
- Check whether your pipeline decodes untrusted TAK (.tak) files with libavcodec

## Timeline

- 2026-11-09T19:28:16+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-125102

## Documents

- [advisory] Third-party advisory: www.vulncheck.com https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-tak-decoder-uninitialized-memory-disclosure-via-takdec-c
- [fix] Patch: github.com https://github.com/FFmpeg/FFmpeg/commit/01e1bb126179879201429952cc2dcaea0d50d603

## From the sources

FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in tak_decode_frame() in libavcodec/takdec.c that fails to verify multichannel decorrelation lists cover every channel. Attackers can supply crafted multichannel TAK files omitting channels from the list, causing undecoded sample buffers to leak heap memory through decoded audio.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_