PT-2026-141021

FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in bitpacked decode uyvy422 in libavcodec/bitpacked dec.c because it never verifies packets hold width height 2 bytes. Attackers can supply truncated bitpacked UYVY422 packets via crafted SDP/RFC 4175 RTP sessions or raw input to...