https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T10:38:42.769123+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-6192 CVE-2026-6192 — uclouvain openjpeg pi.c opj_pi_initialise_encode integer overflow 2026-09-29T10:38:42.790358+00:00

Affected: uclouvain openjpeg

A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opj_pi_initialise_encode in the library src/lib/openjp2/pi.c. The manipulation leads to integer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. The identifier of the patch is 839936aa33eb8899bbbd80fda02796bb65068951. It is suggested to install a patch to address this issue.

 https://vulnerability.circl.lu/vuln/usn-8252-1 USN-8252-1 — openjpeg2 vulnerability 2026-09-29T10:38:42.790459+00:00

Affected: Ubuntu:22.04:LTS: openjpeg2, Ubuntu:24.04:LTS: openjpeg2, Ubuntu:25.10: openjpeg2, Ubuntu:26.04:LTS: openjpeg2

It was discovered that OpenJPEG did not properly handle memory when encoding image files. An attacker could use this issue to cause OpenJPEG to crash, resulting in a denial of service, or possibly execute arbitrary code.