CVE-2026-116671

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-116671", "assignerOrgId": "ace9cabe-4f4f-416b-8c39-b0e002761924", "state": "PUBLISHED", "assignerShortName": "GandC", "dateReserved": "2026-10-26T19:49:20.183Z", "datePublished": "2026-10-26T20:10:20.067Z", "dateUpdated": "2026-11-02T21:32:43.357Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "ace9cabe-4f4f-416b-8c39-b0e002761924", "shortName": "GandC", "dateUpdated": "2026-10-26T20:10:20.067Z"}, "title": "Infinite loop in Xpdf due to missing validation in JPEG 2000 decoder", "datePublic": "2026-10-26T19:54:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-20", "description": "CWE-20 Improper input validation", "type": "CWE"}]}, {"descriptions": [{"lang": "en", "cweId": "CWE-835", "description": "CWE-835 Loop with unreachable exit condition ('infinite loop')", "type": "CWE"}]}], "affected": [{"vendor": "Xpdf", "product": "Xpdf", "platforms": ["all"], "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "4.06", "versionType": "Version"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<div>Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image.</div>"}]}], "references": [{"url": "https://www.xpdfreader.com/security-bug/CVE-2026-116671.html"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "LOCAL", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "LOW", "baseScore": 2.1, "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}}], "credits": [{"lang": "en", "value": "Mateusz Waliszewski and Artur Mattern", "type": "finder"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-02T21:32:30.965858Z", "id": "CVE-2026-116671", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-02T21:32:43.357Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-116671", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-02T21:32:30.965858Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-02T21:32:39.287Z"}}], "cna": {"title": "Infinite loop in Xpdf due to missing validation in JPEG 2000 decoder", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Mateusz Waliszewski and Artur Mattern"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 2.1, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "LOW", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Xpdf", "product": "Xpdf", "versions": [{"status": "affected", "version": "0", "versionType": "Version", "lessThanOrEqual": "4.06"}], "platforms": ["all"], "defaultStatus": "unaffected"}], "datePublic": "2026-10-26T19:54:00.000Z", "references": [{"url": "https://www.xpdfreader.com/security-bug/CVE-2026-116671.html"}], "x_generator": {"engine": "Vulnogram 1.0.5"}, "descriptions": [{"lang": "en", "value": "Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image.", "supportingMedia": [{"type": "text/html", "value": "<div>Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image.</div>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20 Improper input validation"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-835", "description": "CWE-835 Loop with unreachable exit condition ('infinite loop')"}]}], "providerMetadata": {"orgId": "ace9cabe-4f4f-416b-8c39-b0e002761924", "shortName": "GandC", "dateUpdated": "2026-10-26T20:10:20.067Z"}}}, "cveMetadata": {"cveId": "CVE-2026-116671", "state": "PUBLISHED", "dateUpdated": "2026-11-02T21:32:43.357Z", "dateReserved": "2026-10-26T19:49:20.183Z", "assignerOrgId": "ace9cabe-4f4f-416b-8c39-b0e002761924", "datePublished": "2026-10-26T20:10:20.067Z", "assignerShortName": "GandC"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["all"], "product": "Xpdf", "vendor": "Xpdf", "versions": [{"lessThanOrEqual": "4.06", "status": "affected", "version": "0", "versionType": "Version"}]}], "source": "xpdf@xpdfreader.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image."}], "id": "CVE-2026-116671", "lastModified": "2026-11-02T22:17:19.290", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 2.1, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "xpdf@xpdfreader.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-116671", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-02T21:32:30.965858Z", "version": "2.0.3"}}]}, "published": "2026-10-26T21:18:17.410", "references": [{"source": "xpdf@xpdfreader.com", "url": "https://www.xpdfreader.com/security-bug/CVE-2026-116671.html"}], "sourceIdentifier": "xpdf@xpdfreader.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}, {"lang": "en", "value": "CWE-835"}], "source": "xpdf@xpdfreader.com", "type": "Secondary"}]}

{"bugzilla": {"description": "xpdf: Xpdf: Denial of Service via infinite loop during JPEG 2000 image processing", "id": "2561071", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2561071"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-835", "details": ["Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image.", "A flaw was found in Xpdf. This vulnerability allows an attacker to cause a Denial of Service (DoS) by providing a specially crafted JPEG 2000 image. Due to improper validation of the progression order field, processing the file triggers an infinite loop that causes the application to hang."], "name": "CVE-2026-116671", "public_date": "2026-10-26T20:10:20Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-116671\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-116671\nhttps://www.xpdfreader.com/security-bug/CVE-2026-116671.html"], "statement": "This vulnerability is classified as Moderate rather than Important because exploitation requires user interaction to process an untrusted document and only results in a local application hang without memory corruption or unauthorized data access. The flaw affects the parsing of embedded JPEG 2000 graphics within the PDF viewer, resulting in an unterminating loop that consumes CPU resources until the process is terminated. In Red Hat ecosystems, Xpdf is not part of the default core operating system installation and is distributed solely through Extra Packages for Enterprise Linux (EPEL) and Fedora repositories.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": ["all"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,4.06]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Xpdf", "source": "cna", "vendor": "Xpdf"}, "product": "xpdf", "vendor": "xpdf"}], "created": "2026-10-26T22:49:34.415636+00:00", "updated": "2026-10-27T01:15:17.624438+00:00", "vendors": ["xpdf", "xpdf$PRODUCT$xpdf"]}