CVE-2026-112074

MEDIUM 6.3

Tencent ncnn Conversion API mat_pixel.cpp yuv420sp2rgb integer overflow

CVSS Score

6.3

EPSS Score

0.0%

EPSS Percentile

0th

A security flaw has been discovered in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this issue is the function ncnn::yuv420sp2rgb of the file src/mat_pixel.cpp of the component Conversion API. The manipulation results in integer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

CWE	CWE-190 CWE-189
Vendor	tencent
Product	ncnn
Published	Oct 19, 2026

Stay Ahead of the Next One

Get instant alerts for tencent ncnn

Be the first to know when new medium vulnerabilities affecting tencent ncnn are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

Tencent / ncnn

44b02dabdcf97499281a4692ebd65bad73dcf8b6

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/421753 vuldb.com: https://vuldb.com/vuln/421753/cti vuldb.com: https://vuldb.com/cve/CVE-2026-112074 vuldb.com: https://vuldb.com/submit/1009498 github.com: https://github.com/Tencent/ncnn/issues/7035 github.com: https://github.com/Tencent/ncnn/

Credits

🔍 JerryGW (VulDB User) VulDB CNA Team