CVE-2026-125210: FFmpeg through 9.0.2 Heap Overflow in libaribcaption Text Subtitle Decoding

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in aribcaptiontranstextsubtitle() in libavcodec/libaribcaption.c when decoding with subtype text. Attackers can supply a crafted ARIB STD-B24 caption stream with zero regions, causing a pointer write past a zero-sized sub->rects allocation and corrupting heap memory.