PT-2026-141057

FFmpeg through 9.0.2 contains an out-of-bounds memory access vulnerability in the encode frame function of libavcodec/huffyuvenc.c, because encode init never validates minimum frame dimensions for the median predictor. Attackers can supply a tiny video, such as a 2-pixel-wide or 1-2-pixel-tall...