JavaCV: Integer Overflow in IPCameraFrameGrabber Causes Infinite-Loop DoS
影響: maven:org.bytedeco:javacv < 1.5.14 → 1.5.14
IPCameraFrameGrabber parses the Content-Length value from the multipart MJPEG HTTP stream returned by the configured IP camera without any bounds checking. A malicious or compromised camera endpoint - or any network attacker able to tamper with the plaintext HTTP response (these streams are conventionally accessed over http://, as documented in the class itself) - can supply a Content-Length value in the range 1073741825-2147483647. This drives the internal buffer-growth routine ensureB…
| CVE | CVE-2026-102834 |
|---|---|
| 정보원 | GitHub Advisory Database |
| 수집 시각 | 2026. 10. 22. 오전 01:17 |
| 데이터 | Markdown JSON |
2026. 10. 17. 오전 04:53, GitHub Advisory Database에서 "JavaCV: Integer Overflow in IPCameraFrameGrabber Causes Infinite-Loop DoS"을(를) 게시했습니다 (유형: 취약점 권고). 심각도는 "높음"(high)입니다. 관련 기술: Java. CVE: CVE-2026-102834.