{"id":"CVE-2026-107080","published":"2026-10-26T16:17:10.037","lastModified":"2026-10-26T16:50:49.857","description":"OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in opj_dwt_encode_and_deinterleave_v() in src/lib/openjp2/dwt.c. This allows an attacker to cause a denial of service.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://github.com/uclouvain/openjpeg/commit/a38e970fa59abd796c703ec469e578b09f7ffa33","tags":[]},{"url":"https://github.com/uclouvain/openjpeg/issues/1673","tags":[]},{"url":"https://github.com/uclouvain/openjpeg/pull/1674","tags":[]},{"url":"https://www.openwall.com/lists/oss-security/2026/10/05/5","tags":[]},{"url":"http://www.openwall.com/lists/oss-security/2026/10/24/8","tags":[]}],"exploitRefs":[{"url":"https://github.com/uclouvain/openjpeg/commit/a38e970fa59abd796c703ec469e578b09f7ffa33","tags":[]},{"url":"https://github.com/uclouvain/openjpeg/issues/1673","tags":[]},{"url":"https://github.com/uclouvain/openjpeg/pull/1674","tags":[]}],"hasPoc":true,"ai":null}