Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2026-92454

JPEG decoder: truncated segments are read past the image buffer, and a zero sampling factor hangs the decode

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
eclipse

Description

The GUIX software JPEG decoder reads four kinds of marker segment without checking that each is long enough to hold what it reads. A truncated segment is therefore read past the end of the caller's image buffer. Separately, a zero chroma sampling factor makes the block decode loop non-terminating. Both reproduce in the default configuration, in which `GX_SOFTWARE_DECODER_SUPPORT` is enabled.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Eclipse Foundation Eclipse ThreadX - GUIX

Default version status: unaffected

  • 0 to ≤ 6.5.1.202602aaffected
  • 6.5.2.202603unaffected

References