FFmpeg versions through 9.0.2 have a heap buffer overflow vulnerability in the pcm_bluray_decode_frame() function within libavcodec/pcm-bluray.c on big-endian hosts. This flaw occurs when processing a crafted Blu-ray LPCM stream with a payload length not a multiple of the sample size, leading to out-of-bounds writes past the audio frame buffer.