Read the docs

cgohlke

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

cgohlke records in CISA KEV

No cgohlke vulnerabilities are listed in CISA KEV.

Records

2 records

Priority MEDIUM 63

imagecodecs 2026.3.6 through 2026.10.10 contains an infinite loop vulnerability in ccitt_fax4_decode_size() that allows attackers to hang the calling process by supplying a crafted CCITT Group 4 stream.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00124 Published 2026-11-01 No fix listed CWE-835
Priority LOW 29

imagecodecs 2023.1.23 through 2026.10.10 contains a stack-based buffer overflow vulnerability in the lossless JPEG Define Huffman Table parser in decode_jpegsof3().

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00137 Published 2026-11-01 No fix listed CWE-121
Open these records in search →