PT-2026-140984

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in tqi decode frame in libavcodec/eatqi.c, which ignores init get bits failure after an integer overflow. Attackers can supply a crafted EA file with a pIQT chunk carrying a 2^28-byte payload to crash the process, causing deni...