EUVD-2026-109575

A vulnerability was identified in smg-project smg 1.7.0/1.8.0/1.9.0/1.10.0/1.10.1. Affected is the function jpegturbo::decodejpegrgb of the file crates/multimodal/src/jpegturbo.rs of the component llm-multimodal. The manipulation leads to uncontrolled memory allocation. The attack can be initiate...

CVE-2026-116095

A vulnerability was identified in smg-project smg 1.7.0/1.8.0/1.9.0/1.10.0/1.10.1. Affected is the function jpegturbo::decodejpegrgb of the file crates/multimodal/src/jpegturbo.rs of the component llm-multimodal. The manipulation leads to uncontrolled memory allocation. The attack can be initiate...

CVE-2026-116095 smg-project smg llm-multimodal jpeg_turbo.rs decode_jpeg_rgb memory allocation

A vulnerability was identified in smg-project smg 1.7.0/1.8.0/1.9.0/1.10.0/1.10.1. Affected is the function jpegturbo::decodejpegrgb of the file crates/multimodal/src/jpegturbo.rs of the component llm-multimodal. The manipulation leads to uncontrolled memory allocation. The attack can be initiate...

CVE-2026-116095

A vulnerability exists in smg-project smg versions 1.7.0, 1.8.0, 1.9.0, 1.10.0, and 1.10.1 within the llm-multimodal component. The root cause is located in the jpeg_turbo::decode_jpeg_rgb function (file: crates/multimodal/src/jpeg_turbo.rs), where manipulation can lead to uncontrolled memory all...