PT-2026-141045

FFmpeg through 9.0.2 contains an uninitialized memory use vulnerability in roq dpcm encode frame in libavcodec/roqaudioenc.c that encodes stale heap contents when flushed early. Attackers can supply short audio streams under eight frames for RoQ DPCM transcoding, causing DPCM-quantized...