EUVD-2026-120248

FFmpeg through 9.0.2 contains an infinite loop vulnerability in bitallocation in libavcodec/imc.c that allows attackers to hang decoding by supplying audio blocks with a negative bit budget. Attackers can craft IMC or IAC audio files that drive freebits negative, causing the reduction loop to nev...