CVE-2026-120458

Kvazaar through 2.3.2 contains an infinite loop vulnerability in readheader in src/encmain.c that allows attackers to hang the command-line encoder by supplying a truncated Y4M header. Attackers can provide a crafted .y4m file lacking a terminating newline, causing unchecked EOF reads that hang t...

CVE-2026-120458 Kvazaar through 2.3.2 Infinite Loop DoS via Y4M Header Parser

Kvazaar through 2.3.2 contains an infinite loop vulnerability in readheader in src/encmain.c that allows attackers to hang the command-line encoder by supplying a truncated Y4M header. Attackers can provide a crafted .y4m file lacking a terminating newline, causing unchecked EOF reads that hang t...

CVE-2026-120458

Kvazaar versions through 2.3.2 are vulnerable to a Denial of Service (DoS) condition due to an infinite loop in the read_header() function located in src/encmain.c. The vulnerability is triggered when the command-line encoder processes a crafted .y4m file that lacks a terminating newline characte...

EUVD-2026-115218

Kvazaar through 2.3.2 contains an infinite loop vulnerability in readheader in src/encmain.c that allows attackers to hang the command-line encoder by supplying a truncated Y4M header. Attackers can provide a crafted .y4m file lacking a terminating newline, causing unchecked EOF reads that hang t...

CVE-2026-120458 Kvazaar through 2.3.2 Infinite Loop DoS via Y4M Header Parser

Kvazaar through 2.3.2 contains an infinite loop vulnerability in readheader in src/encmain.c that allows attackers to hang the command-line encoder by supplying a truncated Y4M header. Attackers can provide a crafted .y4m file lacking a terminating newline, causing unchecked EOF reads that hang t...

CVE-2026-120458: Ultra Video Group Kvazaar: Kvazaar through 2.3.2 contains an infinite loop vulnerability in read_header() in src/encmain.c that allows attackers…

Kvazaar through 2.3.2 contains an infinite loop vulnerability in readheader in src/encmain.c that allows attackers to hang the command-line encoder by supplying a truncated Y4M header. Attackers can provide a crafted .y4m file lacking a terminating newline, causing unchecked EOF reads that hang t...

PT-2026-135474

Kvazaar through 2.3.2 contains an infinite loop vulnerability in read header in src/encmain.c that allows attackers to hang the command-line encoder by supplying a truncated Y4M header. Attackers can provide a crafted .y4m file lacking a terminating newline, causing unchecked EOF reads that hang...