PT-2026-141061

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in dvbsub encode in libavcodec/dvbsubenc.c that undercounts each CLUT segment header by two bytes. Attackers can supply a file with many bitmap subtitle rectangles that, when transcoded to the dvbsub encoder, writes past the outpu...