cve-2025-9951-ffmpeg-jp2-poc

CVE-2025-9951 FFmpeg JPEG 2000 Exploitation Research This repository contains two deliberately separated exploitation milestones for the FFmpeg JPEG 2000 component-mapping vulnerability: 1. 01-gdb-assisted/ — the original deterministic GDB-launched PoC and its full research-journey writeup,...

openjpeg-2.3.0_CVE-2020-27824

OPENJPEG Library and Applications What is OpenJPEG ? OpenJPEG is an open-source JPEG 2000 codec written in C language. It has been developed in order to promote the use of JPEG 2000, a still-image compression standard from the Joint Photographic Experts Group JPEG. Since April 2015, it is...

CVE-2026-116671

A flaw was found in Xpdf. This vulnerability allows an attacker to cause a Denial of Service DoS by providing a specially crafted JPEG 2000 image. Due to improper validation of the progression order field, processing the file triggers an infinite loop that causes the application to hang...

CVE-2026-116671

Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image...

UBUNTU-CVE-2026-116671

Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image...

CVE-2026-116671

Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image...

CVE-2026-116671 Infinite loop in Xpdf due to missing validation in JPEG 2000 decoder

Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image...

EUVD-2026-110314

Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image...

CVE-2026-116671

The software Xpdf version 4.06 and earlier is susceptible to an infinite loop vulnerability. The root cause is identified as improper input validation (CWE-20, CWE-835) specifically regarding the progression order field in a JPEG 2000 decoder . The impact is characterized by a low base severity (...

Updated ghostscript package fixes a security vulnerability

Ghostscript 10.08.0 Heap Buffer Overflow via JPEG 2000 Output Adapter. CVE-2026-39919...

MGASA-2026-0545 Updated ghostscript package fixes a security vulnerability

Ghostscript 10.08.0 Heap Buffer Overflow via JPEG 2000 Output Adapter. CVE-2026-39919...

PT-2026-125126

Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image...

CLSA-2026-1791463004 ghostscript: Fix of 3 CVEs

CVE-2026-39919: heap buffer overflow in the JPEG 2000 output adapter with subsampled components base/sjpxopenjpeg.c - CVE-2026-103226: stack buffer overflow in the pdfwrite Type 1 to Type 2 font converter control stack devices/vector/gdevpsfx.c...

CLSA-2026-1792576567 ghostscript: Fix of 2 CVEs

CVE-2026-39919: fix heap buffer overflow in the JPEG 2000 decoder when components use different subsampling factors...

CLSA-2026-1792577303 ghostscript: Fix of CVE-2026-39919

CVE-2026-39919: fix heap buffer overflow in the JPEG 2000 decoder when components use different subsampling factors...

CLSA-2026-1792576797 ghostscript: Fix of CVE-2026-39919

CVE-2026-39919: fix heap buffer overflow in the JPEG 2000 decoder when components use different subsampling factors...

Fedora 44 : ghostscript (2026-cf31315f93)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-cf31315f93 advisory. CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 JPXDecode output adapter CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox...

CentOS Linux 8.5 [TuxCare] Security Update: ghostscript / ghostscript-doc / ghostscript-gtk / etc (CENTOS8.5:CLSA-2026:1792576797)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1792576797 advisory. - Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter base/sjpxopenjpeg.c that...

CentOS Linux 8 [TuxCare] Security Update: ghostscript / ghostscript-doc / ghostscript-gtk / etc (CENTOS-STREAM8:CLSA-2026:1792577303)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1792577303 advisory. - Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter base/sjpxopenjpeg.c that...

SUSE SLES12 Security Update : ghostscript (SUSE-SU-2026:4598-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4598-1 advisory. This update for ghostscript fixes the following issue: - CVE-2026-39919: heap-based buffer overflow in the JPEG 2000 output adapter allows...