JLSEC-2025-105 High 8.8

FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in...

JLSEC Published: Oct 19, 2025
Modified: Jul 23, 2026
Severity: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Packages: FFMPEG_jll < 4.3.1+0
Upstream: CVE-2019-15942

FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645_parse because alloc_rbsp_buffer in libavcodec/h2645_parse.c mishandles rbsp_buffer.

References

http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00012.html
https://security.gentoo.org/glsa/202007-58
https://trac.ffmpeg.org/ticket/8093