CVE-2026-12600

CVE-2026-12600 is a denial-of-service vulnerability in the JPEG2000 (JPX) decoder within a Poppler fork maintained by Innodata Labs . The flaw resides in JPXStream::readCodestream(), where attacker-controlled values from the SIZ segment (e.g., img.nComps) are used to allocate memory for tiles and...

imagemagick:encoder_heic_fuzzer: Heap-buffer-overflow in jpegNUMBER_get_SIZ_segment

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4688863555354624 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

imagemagick:encoder_heic_fuzzer: Heap-buffer-overflow in jpegNUMBER_get_SIZ_segment

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4628889915490304 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

imagemagick:encoder_heic_fuzzer: Heap-buffer-overflow in jpegNUMBER_get_SIZ_segment

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4801822327701504 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderheicfuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...