PT-2026-141042

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in pcm bluray decode frame in libavcodec/pcm-bluray.c on big-endian hosts. Attackers can supply a crafted Blu-ray M2TS LPCM stream whose payload length is not a multiple of the sample size, writing attacker-controlled bytes past t...