VYPR

kvazaar

by Ultravideo

CVEs (1)

  • CVE-2026-120458MedNov 2, 2026
    risk 0.29cvss 5.5epss —

    Kvazaar through 2.3.2 contains an infinite loop vulnerability in read_header() in src/encmain.c that allows attackers to hang the command-line encoder by supplying a truncated Y4M header. Attackers can provide a crafted .y4m file lacking a terminating newline, causing unchecked…