An crafted multi-frame can result in a heap buffer over-write when encoding it with the SF3 encoder.
{
"cwe_ids": [
"CWE-122",
"CWE-787"
],
"github_reviewed": true,
"severity": "MODERATE",
"github_reviewed_at": "2026-06-26T23:11:49Z",
"nvd_published_at": "2026-06-10T23:16:50Z"
}