JavaCV IPCameraFrameGrabber Buffer Overflow Vulnerability
CVE-2026-102834

7.5HIGH

Key Information:

Vendor

Bytedeco

Status
Javacv
Vendor
CVE Published:
16 October 2026

What is CVE-2026-102834?

A vulnerability exists in JavaCV's IPCameraFrameGrabber component prior to version 1.5.14, where it fails to correctly validate the Content-Length header of an MJPEG stream. This oversight allows a malicious camera endpoint to send an oversized Content-Length, leading to a buffer overflow. Attackers could cause the application to enter a CPU-spinning loop, effectively denying service by overwhelming the frame-grabbing thread. The issue has been addressed in the latest version, 1.5.14.

Affected Version(s)

javacv < 1.5.14

References

https://github.com/bytedeco/javacv/security/advisories/GH...
x_refsource_CONFIRM
https://github.com/bytedeco/javacv/commit/cd1977800b827be...
x_refsource_MISC
https://github.com/bytedeco/javacv/releases/tag/1.5.14
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.