Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: cgohlke Clear all filters
TI-2026-83577 CVE-2026-120252 · GHSA-89vm-wj4q-hr3r

imagecodecs Stack Buffer Overflow via jpegsof3_decode()

Priority LOW 29

imagecodecs 2023.1.23 through 2026.10.10 contains a stack-based buffer overflow vulnerability in the lossless JPEG Define Huffman Table parser in decode_jpegsof3().

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00137 Published 2026-11-01 No fix listed CWE-121
TI-2026-83576 CVE-2026-120251 · GHSA-j736-6c4x-7rx7

Infinite loop in imagecodecs CCITT Group 4 decoder

Priority MEDIUM 63

imagecodecs 2026.3.6 through 2026.10.10 contains an infinite loop vulnerability in ccitt_fax4_decode_size() that allows attackers to hang the calling process by supplying a crafted CCITT Group 4 stream.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00124 Published 2026-11-01 No fix listed CWE-835