PT-2026-141022

FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in pcm dvd encode frame in libavcodec/pcm-dvdenc.c when a 24-bit final frame holds fewer samples than one block. Attackers can supply 24-bit 48 or 96 kHz audio whose length leaves a short final frame, causing the loop counter to wr...