Memory Leak in FFmpeg via JPEG XS Decoder

Executive Summary

This vulnerability is a resource leak in FFmpeg version 9.0.2. It occurs in the svt_jpegxs_dec_decode() function in libsvtjpegxsdec.c. When ff_set_dimensions() rejects invalid frame dimensions, decoder instances are not properly released, causing memory leaks. Attackers can exploit this by sending a crafted JPEG XS stream with oversized headers, leading to repeated leaks of decoder threads and buffers, eventually exhausting system memory.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, monitor for excessive memory usage or decoder thread leaks when processing JPEG XS streams. Check FFmpeg logs for dimension setting failures or decoder initialization errors. Use system monitoring tools like top, htop, or ps to observe unusual memory consumption by FFmpeg processes.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can cause denial-of-service conditions by exhausting system memory. If exploited, it may lead to crashes, slowdowns, or unresponsiveness of applications using FFmpeg. Users processing media files, especially JPEG XS streams, could experience degraded performance or system instability.

Useful 0 Not Useful 0

Mitigation Strategies

Update FFmpeg to the latest patched version, specifically n9.0.2 or later, which includes fixes for the resource leak in libsvtjpegxsdec.c. If updating is not immediately possible, restrict processing of JPEG XS streams from untrusted sources or disable the JPEG XS decoder module in FFmpeg.

Useful 0 Not Useful 0