Threats tagged 'ghsa-chw9-qpvj-3r3m'

Kvazaar versions through 2.3.2 have an infinite loop vulnerability in the read_header() function of src/encmain.c. This flaw allows attackers to hang the command-line encoder by supplying a crafted .y4m file with a truncated header missing a terminating newline. The vulnerability causes the process to enter an infinite loop, consuming a full CPU core indefinitely.