CVE-2026-125220

FFmpeg versions through 9.0.2 are affected by a deadlock vulnerability in the mimic_decode_frame() function located in libavcodec/mimic.c. The root cause is a failure to report frame progress when init_get_bits8() fails. An attacker can trigger this by providing a crafted file containing an overs...