PT-2026-141018

FFmpeg through 9.0.2 contains an information disclosure vulnerability in decode mvc2 in libavcodec/mvcdec.c that leaks uninitialized stack memory through unchecked palette indices. Attackers can supply a crafted MVC2 stream declaring few colors but referencing higher palette indices, copying...