CVE-2026-125220

FFmpeg through 9.0.2 contains a deadlock vulnerability in mimicdecodeframe in libavcodec/mimic.c that fails to report frame progress when initgetbits8 fails. Attackers can supply a crafted file with an oversized Mimic intra frame followed by inter frames to hang frame-threaded decoding indefinite...