Review
OpenJPEG
CVE published 2026-10-26
CVE-2026-107080
OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in opj_dwt_encode_and_deinterleave_v() in src/lib/openjp2/dwt.c. This allows an attacker to cause a denial of service. The vulnerability affects OpenJPEG, a library used for image processing, and could allow attackers to cause denial of service attacks. Defenders should assess exposure and priori [truncated]