JavaCV: Integer Overflow in IPCameraFrameGrabber Causes Infinite-Loop DoS

影響: maven:org.bytedeco:javacv < 1.5.14 → 1.5.14

IPCameraFrameGrabber parses the Content-Length value from the multipart MJPEG HTTP stream returned by the configured IP camera without any bounds checking. A malicious or compromised camera endpoint - or any network attacker able to tamper with the plaintext HTTP response (these streams are conventionally accessed over http://, as documented in the class itself) - can supply a Content-Length value in the range 1073741825-2147483647. This drives the internal buffer-growth routine ensureB…

GitHub Advisory Databaseで読む

2026/10/17 04:53、GitHub Advisory Databaseが「JavaCV: Integer Overflow in IPCameraFrameGrabber Causes Infinite-Loop DoS」を公開しました (種別: 脆弱性アドバイザリ)。重大度は「重要」(high) です。関連する技術: Java。CVE: CVE-2026-102834。