{"uuid": "7c01b870-869b-4078-83c3-e090af8d39a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38076", "type": "seen", "source": "https://gist.github.com/dkjsone/c237b83ffa9ebd7028b5db7f410fcf78", "content": "[CVE ID]\nCVE-2026-38076\n\n[Vendor of Product]\nArtifex\n\n[Suggested description]\nAn integer overflow in the jbig2_arith_iaid_ctx_new() function of\nArtifex commit cc37d0 allows attackers to cause a Denial of Service\n(DoS) via a crafted input.\n\n[Vulnerability Type]\nInteger Overflow\n\n[Affected Product Code Base]\nhttps://github.com/ArtifexSoftware/jbig2dec - Versions prior to https://github.com/ArtifexSoftware/jbig2dec/commit/cc37d0931aa71582f7128736a068c92cd8712d9b are vulnerable.\n\n[Affected Component]\njbig2_arith_iaid.c, jbig2_arith_iaid_ctx_new(), jbig2_arith_iaid_decode()\n\n[Attack Type]\nLocal\n\n[Impact Denial of Service]\ntrue\n\n[Attack Vectors]\nRemote attackers can exploit this vulnerability by crafting a malicious JBIG2 image file. When a victim application (e.g., MuPDF) parses this file, the insufficient validation of SBSYMCODELEN triggers a signed integer overflow in the decoding loop, leading to an out-of-bounds memory access and application crash (Denial of Service).\n\n[Has vendor confirmed or acknowledged the vulnerability?]\ntrue\n\n[Discoverer]\ndkjsone@gmail.com\n\n[Reference]\nhttp://artifex.com\nhttps://github.com/ArtifexSoftware/jbig2dec", "creation_timestamp": "2026-07-06T07:51:10.434300Z"}