Use-After-Free Vulnerability in FFmpeg's RASC Video Decoder

CVE-2026-12706

What is CVE-2026-12706?

A use-after-free vulnerability exists within FFmpeg's RASC video decoder, specifically in the decode_move() function. This issue arises when the function initializes a read pointer into a decompressed buffer. However, during the move-table processing, if the buffer is reallocated, the pointer becomes dangling. An attacker could exploit this flaw by crafting a malicious AVI file containing a harmful RASC video stream. If a user opens or plays this compromised file, it may cause the decoder to read from already freed heap memory, potentially resulting in a denial of service by crashing the application.

References