## JavaCV: Integer Overflow in IPCameraFrameGrabber Causes Infinite-Loop DoS

- 種別: advisory
- 重大度: high
- 関連技術: java
- CVE: CVE-2026-102834
- 公開日時: 2026-10-16T19:53:06.000Z
- 情報源: GitHub Advisory Database (https://github.com/advisories/GHSA-rxjv-24xq-76wc)
- パーマリンク: https://vulnpulse.app/items/ghsa-ghsa-rxjv-24xq-76wc

影響: maven:org.bytedeco:javacv < 1.5.14 → 1.5.14
Summary IPCameraFrameGrabber parses the Content-Length value from the multipart MJPEG HTTP stream returned by the configured IP camera without any bounds checking. A malicious or compromised camera endpoint - or any network attacker able to tamper with the plaintext HTTP response (these streams are conventionally accessed over http://, as documented in the class itself) - can supply a Content-Length value in the range 1073741825-2147483647. This drives the internal buffer-growth routine ensureB…