1 result · Feed
-
Medium 5.5
Kvazaar through 2.3.2 Infinite Loop DoS via Y4M Header Parser
Kvazaar through 2.3.2 contains an infinite loop vulnerability in read_header() in src/encmain.c that allows attackers to hang the command-line encoder by supplying a truncated Y4M header. Attackers can provide a crafted .y4m file lacking a terminating newline…