JavaCV: Integer Overflow in IPCameraFrameGrabber Causes Infinite-Loop DoS

Summary IPCameraFrameGrabber parses the Content-Length value from the multipart MJPEG HTTP stream returned by the configured IP camera without any bounds checking. A malicious or compromised camera endpoint - or any network attacker able to tamper with the plaintext HTTP response these streams ar...

EUVD-2026-103157

JavaCV provides Java interfaces to OpenCV, FFmpeg, and other multimedia libraries. Prior to 1.5.14, IPCameraFrameGrabber doubles a 32-bit buffer capacity without checking for overflow or bounding the parsed Content-Length. An application consumes an MJPEG response from a malicious camera endpoint...

CVE-2026-102834

Prior to version 1.5.14 , JavaCV is vulnerable to an integer overflow in the IPCameraFrameGrabber component. The software doubles a 32-bit buffer capacity without checking for overflow or bounding the parsed Content-Length . An attacker can exploit this by providing an oversized Content-Length he...

PT-2026-116145

JavaCV provides Java interfaces to OpenCV, FFmpeg, and other multimedia libraries. Prior to 1.5.14, IPCameraFrameGrabber doubles a 32-bit buffer capacity without checking for overflow or bounding the parsed Content-Length. An application consumes an MJPEG response from a malicious camera endpoint...