PT-2026-141052

FFmpeg through 9.0.2 contains a denial of service vulnerability in libavcodec/vorbis parser.c that re-parses invalid extradata for every packet when valid extradata remains false. Attackers can supply crafted Ogg or Matroska Vorbis streams with large invalid extradata and many packets to exhaust...