CVE-2026-66038 | FFmpeg up to 8.1.2 LCL/ZLIB Video Decoder lcldec.c zlib_decomp information disclosure

A vulnerability was found in FFmpeg up to 8.1.2. It has been classified as problematic. This affects the function zlib_decomp of the file lcldec.c of the component LCL/ZLIB Video Decoder. This manipulation causes information disclosure.

This vulnerability is tracked as CVE-2026-66038. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to install a patch to address this issue.