JLSEC-2026-1190

See a problem?
Please try reporting it to the source first.

Source

https://github.com/JuliaLang/SecurityAdvisories.jl/blob/main/advisories/published/2026/JLSEC-2026-1190.md

Import Source

https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-1190.json

JSON Data

https://api.osv.dev/v1/vulns/JLSEC-2026-1190

Upstream

CVE-2026-70630

EUVD-2026-54162

GHSA-7mrq-j773-6867

Published

2026-08-07T13:27:45.313Z

Modified

2026-08-07T13:43:41.241650917Z

Severity

5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVSS Calculator
6.8 (Medium) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS Calculator

Summary

FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read...

Details

FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native Screenpresso decoder (libavcodec/screenpresso.c) that allows attackers to recover sensitive memory contents by supplying a crafted SPV1 packet with a valid zlib stream that decompresses fewer bytes than the full frame requires. The screenpresso_decode_frame() function fails to validate the produced byte count before calling av_image_copy_plane() to copy the complete frame dimensions from the persistent ctx->inflated_buf buffer, causing unwritten heap memory from prior allocations or prior frames to be copied into decoded output and potentially exposing sensitive data such as userspace addresses from persistent decoding services.

Database specific

{
    "sources": [
        {
            "modified": "2026-08-06T22:18:27.273Z",
            "database_specific": {
                "status": "Received"
            },
            "id": "CVE-2026-70630",
            "html_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-70630",
            "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-70630",
            "imported": "2026-08-07T05:42:11.696Z",
            "published": "2026-08-06T22:18:27.273Z"
        },
        {
            "modified": "2026-08-07T00:31:27Z",
            "published": "2026-08-07T00:31:21Z",
            "id": "GHSA-7mrq-j773-6867",
            "url": "https://api.github.com/advisories/GHSA-7mrq-j773-6867",
            "imported": "2026-08-07T05:42:30.385Z",
            "html_url": "https://github.com/advisories/GHSA-7mrq-j773-6867"
        },
        {
            "modified": "2026-08-06T21:27:26Z",
            "html_url": "https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-54162",
            "id": "EUVD-2026-54162",
            "url": "https://euvdservices.enisa.europa.eu/api/enisaid?id=EUVD-2026-54162",
            "imported": "2026-08-07T05:41:14.877Z",
            "published": "2026-08-06T21:25:31Z"
        }
    ],
    "license": "CC-BY-4.0"
}

References

Affected packages

Julia / FFMPEG_jll

Package

Name: FFMPEG_jll
Purl: pkg:julia/FFMPEG_jll?uuid=b22a6f82-2f65-5046-a5b2-351ab43fb4e5

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

9.0.0+0

Database specific

source

"https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-1190.json"

Julia / FFMPEG_nogpl_jll

Package

Name: FFMPEG_nogpl_jll
Purl: pkg:julia/FFMPEG_nogpl_jll?uuid=a6892c6b-5768-548c-b024-ff8dabf482c5

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

9.0.0+0

Database specific

source

"https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-1190.json"

Julia / FFplay_jll

Package

Name: FFplay_jll
Purl: pkg:julia/FFplay_jll?uuid=c4dce911-e170-5107-8314-c7bdc6785395

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Database specific

source

"https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-1190.json"