PT-2026-108039

FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av encryption init info free in libavutil/encryption info.c, which recursively frees AVEncryptionInitInfo linked lists built by the MOV demuxer's mov read pssh. Attackers can supply a crafted MP4 file with tens of thousands of smal...