PT-2026-39706

There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx img alloc with a large value of the d w, d h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx image t struct may be...

PT-2026-35334

Integer overflow in libaom internal function img alloc helper can lead to heap buffer overflow. This function can be reached via 3 callers: - Calling aom img alloc with a large value of the d w, d h, or align parameter may result in integer overflows in the calculations of buffer sizes and offset...

libaom Heap Buffer Overflow DoS

The vulnerability of the imgallochelper function in the libaom video encoding library is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code by sending specially crafted data...