CVE-2026-38076

Published: Jul 9, 2026Modified: Jul 10, 2026Deferred

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An integer overflow in the jbig2_arith_iaid_ctx_new() function of Artifex commit cc37d0 allows attackers to cause a Denial of Service (DoS) via a crafted input.

Related CWEs

CWE-190

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (3)

http://artifex.com

Source: cve@mitre.org

https://gist.github.com/dkjsone/c237b83ffa9ebd7028b5db7f410fcf78

Source: cve@mitre.org

https://github.com/ArtifexSoftware/jbig2dec

Source: cve@mitre.org

Timeline

No history available yet.