Kvazaar vulnerabilities

CVEs whose affected-version data names the Kvazaar package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-120458Medium· 5.5PoC

6d ago

Kvazaar through 2.3.2 Infinite Loop DoS via Y4M Header Parser

Kvazaar through 2.3.2 contains an infinite loop vulnerability in read_header() in src/encmain.c that allows attackers to hang the command-line encoder by supplying a truncated Y4M header. Attackers can provide a crafted .y4m file lacking…

▾ TwilightUltra Video Group · KvazaarEPSS 0.17%via CVEORG