PT-2026-140995

FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in tak decode frame in libavcodec/takdec.c that fails to verify multichannel decorrelation lists cover every channel. Attackers can supply crafted multichannel TAK files omitting channels from the list, causing undecod...