Threats tagged 'ghsa-j736-6c4x-7rx7'

An infinite loop vulnerability exists in imagecodecs versions 2026.3.6 through 2026.10.10 within the ccitt_fax4_decode_size() function. This flaw allows attackers to cause a denial-of-service by supplying a crafted CCITT Group 4 stream that lacks an End Of Facsimile Block (EOFB), leading to full CPU consumption until the affected process is terminated.