CGA-5hf2-95qp-x9p4

The showspectrum off-by-one error has been fixed in FFmpeg 6.1.2. The fix (commits ab0fdaedd1 and 3061bf668f cherry-picked to 6.x) changed the loop condition from <= to < at libavfilter/avf_showspectrum.c:1787. The vulnerable condition 'while (nb_frame <= s->nb_frames)' would allow accessing s->frames[s->nb_frames] which is out of bounds. The fixed code 'while (nb_frame < s->nb_frames)' ensures nb_frame is always a valid array index.