CVE-2026-120457

A flaw was found in libaec. An attacker can cause a Denial of Service DoS or information disclosure by supplying a specially crafted compressed data stream. Due to an out-of-bounds read vulnerability in the decoding function msedecode, an overlong sequence bypasses bounds checking, causing the...

CVE-2026-120457

libaec through 1.1.7 contains an out-of-bounds read vulnerability in msedecode in src/decode.c that allows attackers to bypass a signed bounds check via an overlong fundamental sequence. Attackers can supply a crafted CCSDS 121.0/SZIP stream with 2^31 or more zero bits to crash the decoder or lea...

CVE-2026-120457 libaec through 1.1.7 Out-of-Bounds Read via m_se_decode() Second Extension Decoder

libaec through 1.1.7 contains an out-of-bounds read vulnerability in msedecode in src/decode.c that allows attackers to bypass a signed bounds check via an overlong fundamental sequence. Attackers can supply a crafted CCSDS 121.0/SZIP stream with 2^31 or more zero bits to crash the decoder or lea...

EUVD-2026-115217

libaec through 1.1.7 contains an out-of-bounds read vulnerability in msedecode in src/decode.c that allows attackers to bypass a signed bounds check via an overlong fundamental sequence. Attackers can supply a crafted CCSDS 121.0/SZIP stream with 2^31 or more zero bits to crash the decoder or lea...

CVE-2026-120457 libaec through 1.1.7 Out-of-Bounds Read via m_se_decode() Second Extension Decoder

libaec through 1.1.7 contains an out-of-bounds read vulnerability in msedecode in src/decode.c that allows attackers to bypass a signed bounds check via an overlong fundamental sequence. Attackers can supply a crafted CCSDS 121.0/SZIP stream with 2^31 or more zero bits to crash the decoder or lea...

CVE-2026-120457

The libaec library, versions through 1.1.7 , contains an out-of-bounds read vulnerability in the m_se_decode() function located in src/decode.c. The root cause is a signed bounds check bypass triggered by an overlong fundamental sequence. An attacker can exploit this by supplying a crafted CCSDS ...

CVE-2026-120457: Deutsches Klimarechenzentrum libaec: libaec through 1.1.7 contains an out-of-bounds read vulnerability in m_se_decode() in src/decode.c that allows…

libaec through 1.1.7 contains an out-of-bounds read vulnerability in msedecode in src/decode.c that allows attackers to bypass a signed bounds check via an overlong fundamental sequence. Attackers can supply a crafted CCSDS 121.0/SZIP stream with 2^31 or more zero bits to crash the decoder or lea...

PT-2026-135473

libaec through 1.1.7 contains an out-of-bounds read vulnerability in m se decode in src/decode.c that allows attackers to bypass a signed bounds check via an overlong fundamental sequence. Attackers can supply a crafted CCSDS 121.0/SZIP stream with 2^31 or more zero bits to crash the decoder or...

Security update for libaec (moderate)

openSUSE Security Update: Security update for libaec Announcement ID: openSUSE-SU-2026:0072-1 Rating: moderate References: 1258965 Affected Products: openSUSE Backports SLE-15-SP6 openSUSE Backports SLE-15-SP7 An update that contains security fixes can now be installed. Description: This update f...

Important: Red Hat Security Advisory: RHEL AI 1.5 hdf5 security update

Update hdf5 and libaec to latest upstream version with several CVE fixes RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the RHEL AI application image...