Description
A security flaw has been discovered in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this issue is the function ncnn::yuv420sp2rgb of the file src/mat_pixel.cpp of the component Conversion API. The manipulation results in integer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-10-19
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Integer Overflow
Action: Assess Impact
AI Analysis

Impact

ncnn::yuv420sp2rgb in src/mat_pixel.cpp has an integer overflow when converting YUV420SP to RGB. The CVE description indicates the overflow could corrupt memory, but it does not explicitly state any code execution or crash potential. The CVSS score of 5.3 indicates moderate severity, with unclear impact on confidentiality, integrity, or availability based on the description.

Affected Systems

All releases of Tencent ncnn up to commit 44b02dabdcf97499281a4692ebd65bad73dcf8b6 are affected. No specific product version range is listed, so any build before this commit may be vulnerable.

Risk and Exploitability

The CVE states the attack can be launched remotely and exploit code has been released publicly. The vulnerability has a CVSS score of 5.3, no EPSS score is available, and it is not listed in the CISA KEV catalog. Attackers could supply crafted YUV420SP data to trigger the overflow via the conversion API. There is currently no vendor patch, raising concerns for systems processing untrusted data through this function.

Generated by OpenCVE AI on October 19, 2026 at 04:50 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Check for a newer ncnn release or patch that addresses the integer overflow in the conversion API.
  • If a patch is unavailable, isolate the conversion routine from untrusted data, for example by running it in a sandbox or restricting its exposure.
  • Add bounds checks or validate input payload sizes before calling ncnn::yuv420sp2rgb to prevent potential overflow.

Generated by OpenCVE AI on October 19, 2026 at 04:50 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 19 Oct 2026 03:45:00 +0000

Type Values Removed Values Added
Description A security flaw has been discovered in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this issue is the function ncnn::yuv420sp2rgb of the file src/mat_pixel.cpp of the component Conversion API. The manipulation results in integer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Title Tencent ncnn Conversion API mat_pixel.cpp yuv420sp2rgb integer overflow
First Time appeared Tencent
Tencent ncnn
Weaknesses CWE-189
CWE-190
CPEs cpe:2.3:a:tencent:ncnn:*:*:*:*:*:*:*:*
Vendors & Products Tencent
Tencent ncnn
References
Metrics cvssV2_0

{'score': 7.5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C'}

cvssV3_0

{'score': 6.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C'}

cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Tencent Ncnn
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-10-19T03:30:21.932Z

Reserved: 2026-10-18T13:41:47.775Z

Link: CVE-2026-112074

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-19T04:17:08.910

Modified: 2026-10-19T04:17:08.910

Link: CVE-2026-112074

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-19T05:00:12Z

Weaknesses