Threats tagged 'ghsa-89vm-wj4q-hr3r'

A stack-based buffer overflow vulnerability exists in imagecodecs versions 2023.1.23 through 2026.10.10 in the lossless JPEG Define Huffman Table parser. This flaw occurs when a crafted lossless JPEG file causes the DHT symbol counts to wrap an 8-bit sum, overflowing internal stack arrays and crashing the process.