PT-2026-141003

FFmpeg through 9.0.2 contains an information disclosure vulnerability in flashsv decode block in libavcodec/flashsv.c that copies uninitialized heap memory into decoded frames when inflate output is short. Attackers can supply a crafted FLV with an FSV1 stream whose zlib block data decompresses...