PT-2026-140987

FFmpeg through 9.0.2 contains an infinite loop vulnerability in bit allocation in libavcodec/imc.c that allows attackers to hang decoding by supplying audio blocks with a negative bit budget. Attackers can craft IMC or IAC audio files that drive freebits negative, causing the reduction loop to...