PT-2026-140998

FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in targa decode rle in libavcodec/targa.c caused by missing packet length checks. Attackers can supply truncated RLE-compressed TGA images so decoded frames contain leftover heap buffer data and replicated uninitialize...