https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-10T02:04:03.521879+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-120458 CVE-2026-120458 — Kvazaar through 2.3.2 Infinite Loop DoS via Y4M Header Parser 2026-11-10T02:04:03.523734+00:00

Affected: Ultra Video Group Kvazaar

Kvazaar through 2.3.2 contains an infinite loop vulnerability in read_header() in src/encmain.c that allows attackers to hang the command-line encoder by supplying a truncated Y4M header. Attackers can provide a crafted .y4m file lacking a terminating newline, causing unchecked EOF reads that hang the process indefinitely while consuming a full CPU core.