From f9df3577ac40aaee06f82f05eab8249cbab3cd33 Mon Sep 17 00:00:00 2001
From: Michael Niedermayer <michael@niedermayer.cc>
Date: Thu, 24 Sep 2026 00:56:23 +0200
Subject: [PATCH] avcodec/vqavideo: allocate the codebook zeroed

Fixes: use of uninitialized memory
Fixes: Tt4RMe2vAHv6
Fixes: trithem-vqa-cbf0-short-read-2389ec50.vqa
Fixes: vqa-cbf0-empty-variant.vqa
Found-by: Trithem90
---
 libavcodec/vqavideo.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libavcodec/vqavideo.c b/libavcodec/vqavideo.c
index 99c86a4610..14caba1d02 100644
--- a/libavcodec/vqavideo.c
+++ b/libavcodec/vqavideo.c
@@ -183,7 +183,7 @@ static av_cold int vqa_decode_init(AVCodecContext *avctx)
 
     /* allocate codebooks */
     s->codebook_size = MAX_CODEBOOK_SIZE;
-    s->codebook = av_malloc(s->codebook_size);
+    s->codebook = av_mallocz(s->codebook_size);
     if (!s->codebook)
         return AVERROR(ENOMEM);
     s->next_codebook_buffer = av_malloc(s->codebook_size);