PT-2026-141077

FFmpeg 7.1 through 9.0.2 contains an integer overflow in ff vk decode add slice in libavcodec/vulkan decode.c that miscalculates the Vulkan hwaccel bitstream buffer size. Attackers can supply a crafted stream with over 2 GiB of slice data per frame, causing memcpy to write past a smaller pooled...