CVE-2026-112074 | Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6 Conversion API src/mat_pixel.cpp ncnn::yuv420sp2rgb integer overflow (Issue 7035)

SecurityVulns
Yanac

A vulnerability, which was classified as critical, was found in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this issue is the function ncnn::yuv420sp2rgb of the file src/mat_pixel.cpp of the component Conversion API. The manipulation results in integer overflow.

This vulnerability is reported as CVE-2026-112074. The attack can be launched remotely. Moreover, an exploit is present.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More