PT-2026-141017

FFmpeg 8.1 through 9.0.2 contains a denial of service vulnerability in the lcevc metadata bitstream filter caused by a process block position mismatch in lcevc metadata handle vui. Attackers can supply crafted LCEVC access units with two IDR or non-IDR NAL units to trigger an av assert0 failure i...