A reachable assertion in FFmpeg git-master commit N-113007-g8d24a28d06 allows attackers to cause a Denial of Service (DoS) via opening a crafted AAC file.
https://trac.ffmpeg.org/ticket/11385
https://lists.debian.org/debian-lts-announce/2025/02/msg00037.html