Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-07-09T00:00:00 jbig2dec: jbig2dec: Denial of Service via crafted input 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CWE-190

An integer overflow in the jbig2_arith_iaid_ctx_new() function of Artifex commit cc37d0 allows attackers to cause a Denial of Service (DoS) via a crafted input.

A flaw was found in jbig2dec. An integer overflow vulnerability in the `jbig2_arith_iaid_ctx_new()` function allows a remote attacker to cause a Denial of Service (DoS) by providing a specially crafted input. This can lead to the affected system becoming unresponsive or crashing, disrupting its normal operation.

Red Hat Enterprise Linux 10 Fix deferred jbig2dec Red Hat Enterprise Linux 8 Fix deferred jbig2dec Red Hat Enterprise Linux 9 Fix deferred jbig2dec https://www.cve.org/CVERecord?id=CVE-2026-38076 https://nvd.nist.gov/vuln/detail/CVE-2026-38076 http://artifex.com https://gist.github.com/dkjsone/c237b83ffa9ebd7028b5db7f410fcf78 https://github.com/ArtifexSoftware/jbig2dec