PatchSiren

OpenJPEG CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Review OpenJPEG CVE published 2026-10-26

CVE-2026-107080

OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in opj_dwt_encode_and_deinterleave_v() in src/lib/openjp2/dwt.c. This allows an attacker to cause a denial of service. The vulnerability affects OpenJPEG, a library used for image processing, and could allow attackers to cause denial of service attacks. Defenders should assess exposure and priori [truncated]