1397 matches found
[SECURITY] Fedora 44 Update: openjpeg-2.5.4-5.fc44
The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profile-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multiple...
CVE-2026-116671
Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image...
cve-2025-9951-ffmpeg-jp2-poc
CVE-2025-9951 FFmpeg JPEG 2000 Exploitation Research This repository contains two deliberately separated exploitation milestones for the FFmpeg JPEG 2000 component-mapping vulnerability: 1. 01-gdb-assisted/ — the original deterministic GDB-launched PoC and its full research-journey writeup,...
openjpeg-2.3.0_CVE-2020-27824
OPENJPEG Library and Applications What is OpenJPEG ? OpenJPEG is an open-source JPEG 2000 codec written in C language. It has been developed in order to promote the use of JPEG 2000, a still-image compression standard from the Joint Photographic Experts Group JPEG. Since April 2015, it is...
Linux Distros Unpatched Vulnerability : CVE-2026-116671
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image. CVE-2026-116671 Note that Nessus relies on th...
Fedora 43 : ghostscript (2026-58a572baa1)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-58a572baa1 advisory. CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 JPXDecode output adapter CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox...
CVE-2026-116671
A flaw was found in Xpdf. This vulnerability allows an attacker to cause a Denial of Service DoS by providing a specially crafted JPEG 2000 image. Due to improper validation of the progression order field, processing the file triggers an infinite loop that causes the application to hang...
CVE-2026-116671
Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image...
UBUNTU-CVE-2026-116671
Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image...
CVE-2026-116671
Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image...
CVE-2026-116671 Infinite loop in Xpdf due to missing validation in JPEG 2000 decoder
Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image...
CVE-2026-116671
The software Xpdf version 4.06 and earlier is susceptible to an infinite loop vulnerability. The root cause is identified as improper input validation (CWE-20, CWE-835) specifically regarding the progression order field in a JPEG 2000 decoder . The impact is characterized by a low base severity (...
EUVD-2026-110314
Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image...
CVE-2026-116671 Infinite loop in Xpdf due to missing validation in JPEG 2000 decoder
Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image...
MGASA-2026-0545 Updated ghostscript package fixes a security vulnerability
Ghostscript 10.08.0 Heap Buffer Overflow via JPEG 2000 Output Adapter. CVE-2026-39919...
Updated ghostscript package fixes a security vulnerability
Ghostscript 10.08.0 Heap Buffer Overflow via JPEG 2000 Output Adapter. CVE-2026-39919...
XPDF input validation error vulnerability
Security vulnerabilities exist in xpdf versions 4.06 and earlier. These vulnerabilities stem from improper validation of the progression order field in JPEG 2000 images, potentially leading to infinite loops...
PT-2026-125126
Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image...
CLSA-2026-1791463004 ghostscript: Fix of 3 CVEs
CVE-2026-39919: heap buffer overflow in the JPEG 2000 output adapter with subsampled components base/sjpxopenjpeg.c - CVE-2026-103226: stack buffer overflow in the pdfwrite Type 1 to Type 2 font converter control stack devices/vector/gdevpsfx.c...