FFplay crashes when seeking in .ogg file with images

[giuseppeM99]

Summary of the bug:
When playing an .ogg music file (encoded with FFmpeg) using ffplay, attempting to seek forward or backward causes a segmentation fault (SIGSEGV: address boundary error). The crash only occurs if the .ogg file includes an attached image (e.g., an album cover). I can provide a sample if needed.
I was able to reproduce the issue in the latest release (7.1.1) and the current git-master.
Valgrind and GDB reports will be attached.
How to reproduce:

Make a .ogg with an image
% ffmpeg -i audio.wav -i image.png output.ogg
Play the audio sample and try to seek backward of forward
% ffplay -i output.ogg
ffplay version n7.1.1 Copyright (c) 2003-2025 the FFmpeg developers
  built with gcc 15.1.1 (GCC) 20250425
  configuration: --prefix=/usr --disable-debug --disable-static --disable-stripping --enable-amf --enable-avisynth --enable-cuda-llvm --enable-lto --enable-fontconfig --enable-frei0r --enable-gmp --enable-gnutls --enable-gpl --enable-ladspa --enable-libaom --enable-libass --enable-libbluray --enable-libbs2b --enable-libdav1d --enable-libdrm --enable-libdvdnav --enable-libdvdread --enable-libfreetype --enable-libfribidi --enable-libglslang --enable-libgsm --enable-libharfbuzz --enable-libiec61883 --enable-libjack --enable-libjxl --enable-libmodplug --enable-libmp3lame --enable-libopencore_amrnb --enable-libopencore_amrwb --enable-libopenjpeg --enable-libopenmpt --enable-libopus --enable-libplacebo --enable-libpulse --enable-librav1e --enable-librsvg --enable-librubberband --enable-libsnappy --enable-libsoxr --enable-libspeex --enable-libsrt --enable-libssh --enable-libsvtav1 --enable-libtheora --enable-libv4l2 --enable-libvidstab --enable-libvmaf --enable-libvorbis --enable-libvpl --enable-libvpx --enable-libwebp --enable-libx264 --enable-libx265 --enable-libxcb --enable-libxml2 --enable-libxvid --enable-libzimg --enable-libzmq --enable-nvdec --enable-nvenc --enable-opencl --enable-opengl --enable-shared --enable-vapoursynth --enable-version3 --enable-vulkan
  libavutil      59. 39.100 / 59. 39.100
  libavcodec     61. 19.101 / 61. 19.101
  libavformat    61.  7.100 / 61.  7.100
  libavdevice    61.  3.100 / 61.  3.100
  libavfilter    10.  4.100 / 10.  4.100
  libswscale      8.  3.100 /  8.  3.100
  libswresample   5.  3.100 /  5.  3.100
  libpostproc    58.  3.100 / 58.  3.100

Linux 6.14.9-arch1-1 #1 SMP PREEMPT_DYNAMIC

[giuseppeM99]

Valgrind log

[giuseppeM99]

gdb report

[kvog]

This appears to be fixed as of 90551b7d80e39c2fcde67fc65e3623bbef12590c.