CVE-2026-38076
jbig2dec: jbig2dec: Denial of Service via crafted input
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 9, 2026
Updated · July 11, 2026
Description
A flaw was found in jbig2dec. An integer overflow vulnerability in the jbig2_arith_iaid_ctx_new() function allows a remote attacker to cause a Denial of Service (DoS) by providing a specially crafted input. This can lead to the affected system becoming unresponsive or crashing, disrupting its normal operation.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-190 · Integer Overflow or Wraparound