{"id":"CVE-2026-38076","aliases":["DEBIAN-CVE-2026-38076","EUVD-2026-42767","GHSA-v2wp-4h2v-wxcx","MGASA-2026-0344","OESA-2026-2995","OESA-2026-2996","OESA-2026-3133","OESA-2026-3134","OESA-2026-3135","UBUNTU-CVE-2026-38076"],"status":"published","title":"An integer overflow in the jbig2_arith_iaid_ctx_new() function of Artifex commit cc37d0 allows...","description":"An integer overflow in the jbig2_arith_iaid_ctx_new() function of Artifex commit cc37d0 allows attackers to cause a Denial of Service (DoS) via a crafted input.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00441,"percentile":0.38728,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2026-07-09T00:00:00Z","modified":"2026-10-01T03:03:22Z","fixes":[{"ecosystem":"Debian:12","package":"jbig2dec","fixed_in":["0.19-3+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"jbig2dec","fixed_in":["0.20-1+deb13u1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"jbig2dec","fixed_in":["0.18-5.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"jbig2dec","fixed_in":["0.19-6.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP4","package":"jbig2dec","fixed_in":["0.20-3.oe2403sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"jbig2dec","fixed_in":["0.20-3.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"jbig2dec","fixed_in":["0.20-3.oe2403sp3"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"jbig2dec","fixed_in":["0.19-3ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"jbig2dec","fixed_in":["0.20-1ubuntu0.24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"jbig2dec","fixed_in":["0.20-1ubuntu0.26.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"jbig2dec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19-3+deb12u1"}]}],"versions":["0.19-3"]},{"source":"osv","ecosystem":"Debian:13","package":"jbig2dec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20-1+deb13u1"}]}],"versions":["0.20-1"]},{"source":"osv","ecosystem":"Debian:14","package":"jbig2dec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.20-1"]},{"source":"osv","ecosystem":"Mageia:10","package":"jbig2dec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20-2.1.mga10"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:9","package":"jbig2dec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19-4.1.mga9"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"jbig2dec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18-5.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"jbig2dec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19-6.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"jbig2dec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20-3.oe2403sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"jbig2dec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20-3.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"jbig2dec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20-3.oe2403sp3"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"jbig2dec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.11+20120125-1ubuntu1","0.11+20120125-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"jbig2dec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.12-2","0.12+20150918-1","0.12+20150918-1ubuntu0.1","0.12+20150918-1ubuntu0.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"jbig2dec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.13-5","0.13-6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"jbig2dec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.16-1","0.17-1","0.18-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"jbig2dec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19-3ubuntu0.1"}]}],"versions":["0.19-3","0.19-3build1","0.19-3build2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"jbig2dec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20-1ubuntu0.24.04.1"}]}],"versions":["0.19-3build2","0.20-1","0.20-1build2","0.20-1build3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"jbig2dec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20-1ubuntu0.26.04.1"}]}],"versions":["0.20-1build3","0.20-1build4"]}],"references":[{"url":"http://artifex.com"},{"url":"https://github.com/ArtifexSoftware/jbig2dec"},{"url":"https://gist.github.com/dkjsone/c237b83ffa9ebd7028b5db7f410fcf78","tags":["report"]},{"url":"https://lists.debian.org/debian-lts-announce/2026/09/msg00014.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-38076","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-v2wp-4h2v-wxcx"},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-38076","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0344.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35994","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8582-1","tags":["advisory"]},{"url":"https://github.com/Frank-Z7/z-vulnerabilitys/blob/main/jbig2dec-SEGV/jbig2dec-SEGV.md","tags":["web"]},{"url":"https://bugs.ghostscript.com/show_bug.cgi?id=707308","tags":["report"]},{"url":"https://bugs.ghostscript.com/show_bug.cgi?id=705041","tags":["report"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2995","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2996","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3133","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3134","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3135","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-38076","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-38076","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-38076","description":"An integer overflow in the jbig2_arith_iaid_ctx_new() function of Artifex commit cc37d0 allows attackers to cause a Denial of Service (DoS) via a crafted input.","status":"published","published":"2026-07-09T00:00:00Z","modified":"2026-09-14T13:08:23.195Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:19:58.560602Z"}],"euvd":[{"id":"EUVD-2026-42767","description":"An integer overflow in the jbig2_arith_iaid_ctx_new() function of Artifex commit cc37d0 allows attackers to cause a Denial of Service (DoS) via a crafted input.","status":"published","published":"2026-07-09T00:00:00Z","modified":"2026-09-14T13:08:23Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T17:28:20.757989Z"}],"ghsa":[{"id":"GHSA-v2wp-4h2v-wxcx","title":"An integer overflow in the jbig2_arith_iaid_ctx_new() function of Artifex commit cc37d0 allows...","description":"An integer overflow in the jbig2_arith_iaid_ctx_new() function of Artifex commit cc37d0 allows attackers to cause a Denial of Service (DoS) via a crafted input.","status":"published","published":"2026-07-10T00:31:25Z","modified":"2026-09-14T15:32:13Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:11:49.397809Z"}],"nvd":[{"id":"CVE-2026-38076","description":"An integer overflow in the jbig2_arith_iaid_ctx_new() function of Artifex commit cc37d0 allows attackers to cause a Denial of Service (DoS) via a crafted input.","status":"published","published":"2026-07-09T22:17:03.983Z","modified":"2026-09-14T14:17:07.643Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:12:28.4135Z"}],"osv":[{"id":"DEBIAN-CVE-2026-38076","description":"An integer overflow in the jbig2_arith_iaid_ctx_new() function of Artifex commit cc37d0 allows attackers to cause a Denial of Service (DoS) via a crafted input.","status":"published","published":"2026-07-09T22:17:03.983Z","modified":"2026-10-01T03:03:22.965159415Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:54.587575Z"},{"id":"OESA-2026-2995","title":"jbig2dec security update","description":"jbig2dec is a decoder implementation of the JBIG2 image compression format.\r\n\r\nSecurity Fix(es):\n\nAn integer overflow in the jbig2_arith_iaid_ctx_new() function of Artifex commit cc37d0 allows attackers to cause a Denial of Service (DoS) via a crafted input.(CVE-2026-38076)","status":"published","published":"2026-07-19T11:11:53Z","modified":"2026-08-18T01:21:18.143171577Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-2996","title":"jbig2dec security update","description":"jbig2dec is a decoder implementation of the JBIG2 image compression format.\r\n\r\nSecurity Fix(es):\n\nAn integer overflow in the jbig2_arith_iaid_ctx_new() function of Artifex commit cc37d0 allows attackers to cause a Denial of Service (DoS) via a crafted input.(CVE-2026-38076)","status":"published","published":"2026-07-19T11:11:54Z","modified":"2026-08-18T01:21:18.040623872Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-3133","title":"jbig2dec security update","description":"jbig2dec is a decoder implementation of the JBIG2 image compression format.\r\n\r\nSecurity Fix(es):\n\nAn integer overflow in the jbig2_arith_iaid_ctx_new() function of Artifex commit cc37d0 allows attackers to cause a Denial of Service (DoS) via a crafted input.(CVE-2026-38076)","status":"published","published":"2026-07-24T11:12:00Z","modified":"2026-08-18T01:21:24.696640891Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-3134","title":"jbig2dec security update","description":"jbig2dec is a decoder implementation of the JBIG2 image compression format.\r\n\r\nSecurity Fix(es):\n\nAn integer overflow in the jbig2_arith_iaid_ctx_new() function of Artifex commit cc37d0 allows attackers to cause a Denial of Service (DoS) via a crafted input.(CVE-2026-38076)","status":"published","published":"2026-07-24T11:12:01Z","modified":"2026-08-18T01:21:24.675165766Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-3135","title":"jbig2dec security update","description":"jbig2dec is a decoder implementation of the JBIG2 image compression format.\r\n\r\nSecurity Fix(es):\n\nAn integer overflow in the jbig2_arith_iaid_ctx_new() function of Artifex commit cc37d0 allows attackers to cause a Denial of Service (DoS) via a crafted input.(CVE-2026-38076)","status":"published","published":"2026-07-24T11:12:01Z","modified":"2026-08-18T01:21:24.746680864Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"UBUNTU-CVE-2026-38076","description":"An integer overflow in the jbig2_arith_iaid_ctx_new() function of Artifex commit cc37d0 allows attackers to cause a Denial of Service (DoS) via a crafted input.","status":"published","published":"2026-07-09T22:17:00Z","modified":"2026-07-22T03:30:13.630251415Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:16.686388Z"},{"id":"MGASA-2026-0344","title":"Updated jbig2dec packages fix security vulnerabilities","description":"Artifex Software jbig2dec v0.20 was discovered to contain a SEGV\nvulnerability via jbig2_error at /jbig2dec/jbig2.c. (CVE-2023-46361)\nAn integer overflow in the jbig2_arith_iaid_ctx_new() function of\nArtifex commit cc37d0 allows attackers to cause a Denial of Service\n(DoS) via a crafted input. (CVE-2026-38076)\n","status":"published","published":"2026-08-31T16:22:02Z","modified":"2026-08-31T16:30:04.403347236Z","updated_at":"2026-11-02T15:49:43.795591Z"}]}}