CVE-2026-120458

Kvazaar versions through 2.3.2 are vulnerable to a Denial of Service (DoS) condition due to an infinite loop in the read_header() function located in src/encmain.c. The vulnerability is triggered when the command-line encoder processes a crafted .y4m file that lacks a terminating newline characte...