cgohlke CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM cgohlke CVE published 2026-11-01

CVE-2026-120252

A stack-based buffer overflow vulnerability exists in the imagecodecs library, specifically in the lossless JPEG Define Huffman Table parser. This vulnerability can cause a crash when processing a crafted lossless JPEG image. The imagecodecs library is used in various applications, and defenders should verify library versions and implement input validation to prevent potential crashes. The vulnerability w [truncated]

MEDIUM cgohlke CVE published 2026-11-01

CVE-2026-120251

CVE-2026-120251 is a vulnerability in the imagecodecs library, specifically in the ccitt_fax4_decode_size() function, which can cause an infinite loop when processing a crafted CCITT Group 4 stream. This vulnerability can be exploited by providing an 8-byte G4 stream lacking EOFB to ccittfax4_decode() or the numcodecs Ccittfax4 codec, causing the process to consume full CPU until it is killed.