CVE-2026-112074 — Tencent ncnn Conversion API mat_pixel.cpp yuv420sp2rgb integer overflow
A security flaw has been discovered in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. The issue affects the ncnn::yuv420sp2rgb function in src/mat_pixel.cpp in the Conversion API and results in an integer overflow. The attack can be launched remotely, and an exploit has been publicly released and may be used in attacks.
CERT24