CVE-2026-116671

The software Xpdf version 4.06 and earlier is susceptible to an infinite loop vulnerability. The root cause is identified as improper input validation (CWE-20, CWE-835) specifically regarding the progression order field in a JPEG 2000 decoder . The impact is characterized by a low base severity (...

CVE-2026-116671 Infinite loop in Xpdf due to missing validation in JPEG 2000 decoder

Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image...

ffmpeg:ffmpeg_AV_CODEC_ID_JPEG2000_DEC_fuzzer: Use-of-uninitialized-value in jpegNUMBER_bitbuf_refill_backwards

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6467586186608640 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDJPEG2000DECfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : FFmpeg vulnerabilities (USN-7830-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7830-1 advisory. It was discovered that FFmpeg incorrectly handled the return values of functions in its Firequalizer filter and in th...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the getsiz function in jpeg2000dec.c. An attacker can execute arbitrary code or cause a crash by supplying a crafted JPEG2000 file containing a malicious cdef atom. Remediation Upgrade ffmpeg to version 8....

OESA-2025-2029 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: FFmpeg...

opencv:imdecode_fuzzer: Heap-buffer-overflow in opj_jp2_apply_pclr

Project: https://github.com/opencv/opencv.git Detailed Report: https://oss-fuzz.com/testcase?key=5757342214651904 Project: opencv Fuzzing Engine: libFuzzer Fuzz Target: imdecodefuzzer Job Type: libfuzzerasanopencv Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

PT-2018-3834

Name of the Vulnerable Software and Affected Versions OpenCV version 3.3.1 Description A heap-based buffer overflow occurs in the cv::Jpeg2KDecoder::readComponent8u function in modules/imgcodecs/src/grfmt jpeg2000.cpp when parsing a crafted image file, potentially allowing a remote attacker to...