CVE-2026-38076

HIGH7.5

An integer overflow in the jbig2_arith_iaid_ctx_new() function of Artifex commit cc37d0 allows attackers to cause a Denial of Service (DoS) via a crafted input

Published Jul 9, 2026

Modified 1 weeks ago

Details

An integer overflow in the jbig2_arith_iaid_ctx_new() function of Artifex commit cc37d0 allows attackers to cause a Denial of Service (DoS) via a crafted input.

References

WEB

http://artifex.com

WEB

https://gist.github.com/dkjsone/c237b83ffa9ebd7028b5db7f410fcf78

WEB

https://github.com/ArtifexSoftware/jbig2dec

WEB

https://lists.debian.org/debian-lts-announce/2026/09/msg00014.html

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-38076

CVSS Analysis