PT-2026-141093

FFmpeg through 9.0.2 contains a use-after-free vulnerability in libavcodec/nvdec.c because ff nvdec start frame fails to reset ctx-bitstream after slice errors. Attackers can supply crafted video that abandons a picture before end frame, causing cuvidDecodePicture to read freed heap memory,...