Synopsis:
jbig2dec security updateSummary:
An update for jbig2dec is now available for openEuler-24.03-LTS-SP4Description:
jbig2dec is a decoder implementation of the JBIG2 image compression format.
Security Fix(es):
An integer overflow in the jbig2_arith_iaid_ctx_new() function of Artifex commit cc37d0 allows attackers to cause a Denial of Service (DoS) via a crafted input.(CVE-2026-38076)Topic:
An update for jbig2dec is now available for openEuler-24.03-LTS-SP4.
openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.Severity:
HighAffected Component:
jbig2dec
0.20-3.oe2403sp40.20-3.oe2403sp40.20-3.oe2403sp40.20-3.oe2403sp40.20-3.oe2403sp4Exploitability
AV:NAC:LPR:NUI:NScope
S:UImpact
C:NI:NA:H7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H