CVE-2026-120458

Kvazaar through 2.3.2 contains an infinite loop vulnerability in readheader in src/encmain.c that allows attackers to hang the command-line encoder by supplying a truncated Y4M header. Attackers can provide a crafted .y4m file lacking a terminating newline, causing unchecked EOF reads that hang t...

EUVD-2026-115218

Kvazaar through 2.3.2 contains an infinite loop vulnerability in readheader in src/encmain.c that allows attackers to hang the command-line encoder by supplying a truncated Y4M header. Attackers can provide a crafted .y4m file lacking a terminating newline, causing unchecked EOF reads that hang t...

CVE-2026-120458

Kvazaar versions through 2.3.2 are vulnerable to a Denial of Service (DoS) condition due to an infinite loop in the read_header() function located in src/encmain.c. The vulnerability is triggered when the command-line encoder processes a crafted .y4m file that lacks a terminating newline characte...