CVE-2026-64835

FFmpeg 4.4–8.1.2 contains an out-of-bounds memory access in the ADX audio decoder (libavcodec/adxdec.c). The issue occurs when a crafted ADX or AAX file with a mid-stream channel layout change is decoded; AV_PKT_DATA_NEW_EXTRADATA side data received mid-stream causes the adx_decode_frame path to ...