Tag
A signed integer overflow vulnerability, CVE-2026-66039, exists in the MACE6 audio decoder of FFmpeg versions through 8.1.2, allowing attackers to corrupt heap memory and achieve code execution by supplying a crafted CAF file with malicious bytes_per_packet and frames_per_packet values.