CVE-2026-6192

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-6192", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-04-13T08:41:16.591Z", "datePublished": "2026-04-13T16:45:11.772Z", "dateUpdated": "2026-05-21T15:04:22.207Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-04-13T16:45:11.772Z"}, "title": "uclouvain openjpeg pi.c opj_pi_initialise_encode integer overflow", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-190", "lang": "en", "description": "Integer Overflow"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-189", "lang": "en", "description": "Numeric Error"}]}], "affected": [{"vendor": "uclouvain", "product": "openjpeg", "versions": [{"version": "2.5.0", "status": "affected"}, {"version": "2.5.1", "status": "affected"}, {"version": "2.5.2", "status": "affected"}, {"version": "2.5.3", "status": "affected"}, {"version": "2.5.4", "status": "affected"}], "cpes": ["cpe:2.3:a:uclouvain:openjpeg:*:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opj_pi_initialise_encode in the library src/lib/openjp2/pi.c. The manipulation leads to integer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. The identifier of the patch is 839936aa33eb8899bbbd80fda02796bb65068951. It is suggested to install a patch to address this issue."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 4.8, "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 3.3, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", "baseSeverity": "LOW"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 3.3, "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", "baseSeverity": "LOW"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 1.7, "vectorString": "AV:L/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:OF/RC:C"}}], "timeline": [{"time": "2026-04-13T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-04-13T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-04-13T10:46:20.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "Kery Qi (VulDB User)", "type": "reporter"}], "references": [{"url": "https://vuldb.com/vuln/357114", "name": "VDB-357114 | uclouvain openjpeg pi.c opj_pi_initialise_encode integer overflow", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/357114/cti", "name": "VDB-357114 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/797385", "name": "Submit #797385 | uclouvain openjpeg 2.5.4 Integer Overflow", "tags": ["third-party-advisory"]}, {"url": "https://github.com/uclouvain/openjpeg/issues/1619", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/uclouvain/openjpeg/pull/1628", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/uclouvain/openjpeg/commit/839936aa33eb8899bbbd80fda02796bb65068951", "tags": ["patch"]}, {"url": "https://github.com/uclouvain/openjpeg/", "tags": ["product"]}], "tags": ["x_open-source"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-14T13:56:15.918841Z", "id": "CVE-2026-6192", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-14T13:56:25.079Z"}}, {"title": "CVE Program Container", "references": [{"url": "https://lists.debian.org/debian-lts-announce/2026/05/msg00038.html"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-05-21T15:04:22.207Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://lists.debian.org/debian-lts-announce/2026/05/msg00038.html"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-05-21T15:04:22.207Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-6192", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-14T13:56:15.918841Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-14T13:56:20.488Z"}}], "cna": {"tags": ["x_open-source"], "title": "uclouvain openjpeg pi.c opj_pi_initialise_encode integer overflow", "credits": [{"lang": "en", "type": "reporter", "value": "Kery Qi (VulDB User)"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 4.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 1.7, "vectorString": "AV:L/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:OF/RC:C"}}], "affected": [{"cpes": ["cpe:2.3:a:uclouvain:openjpeg:*:*:*:*:*:*:*:*"], "vendor": "uclouvain", "product": "openjpeg", "versions": [{"status": "affected", "version": "2.5.0"}, {"status": "affected", "version": "2.5.1"}, {"status": "affected", "version": "2.5.2"}, {"status": "affected", "version": "2.5.3"}, {"status": "affected", "version": "2.5.4"}]}], "timeline": [{"lang": "en", "time": "2026-04-13T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-04-13T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-04-13T10:46:20.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/357114", "name": "VDB-357114 | uclouvain openjpeg pi.c opj_pi_initialise_encode integer overflow", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/357114/cti", "name": "VDB-357114 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/797385", "name": "Submit #797385 | uclouvain openjpeg 2.5.4 Integer Overflow", "tags": ["third-party-advisory"]}, {"url": "https://github.com/uclouvain/openjpeg/issues/1619", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/uclouvain/openjpeg/pull/1628", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/uclouvain/openjpeg/commit/839936aa33eb8899bbbd80fda02796bb65068951", "tags": ["patch"]}, {"url": "https://github.com/uclouvain/openjpeg/", "tags": ["product"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opj_pi_initialise_encode in the library src/lib/openjp2/pi.c. The manipulation leads to integer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. The identifier of the patch is 839936aa33eb8899bbbd80fda02796bb65068951. It is suggested to install a patch to address this issue."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-190", "description": "Integer Overflow"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-189", "description": "Numeric Error"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-04-13T16:45:11.772Z"}}}, "cveMetadata": {"cveId": "CVE-2026-6192", "state": "PUBLISHED", "dateUpdated": "2026-05-21T15:04:22.207Z", "dateReserved": "2026-04-13T08:41:16.591Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-04-13T16:45:11.772Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:uclouvain:openjpeg:*:*:*:*:*:*:*:*"], "product": "openjpeg", "vendor": "uclouvain", "versions": [{"status": "affected", "version": "2.5.0"}, {"status": "affected", "version": "2.5.1"}, {"status": "affected", "version": "2.5.2"}, {"status": "affected", "version": "2.5.3"}, {"status": "affected", "version": "2.5.4"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opj_pi_initialise_encode in the library src/lib/openjp2/pi.c. The manipulation leads to integer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. The identifier of the patch is 839936aa33eb8899bbbd80fda02796bb65068951. It is suggested to install a patch to address this issue."}, {"lang": "es", "value": "Una vulnerabilidad fue identificada en uclouvain openjpeg hasta 2.5.4. Esto afecta la funci\u00f3n opj_pi_initialise_encode en la biblioteca src/lib/openjp2/pi.c. La manipulaci\u00f3n conduce a desbordamiento de entero. El ataque debe llevarse a cabo localmente. El exploit est\u00e1 disponible p\u00fablicamente y podr\u00eda ser usado. El identificador del parche es 839936aa33eb8899bbbd80fda02796bb65068951. Se sugiere instalar un parche para abordar este problema."}], "id": "CVE-2026-6192", "lastModified": "2026-10-26T21:10:00.170", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 1.7, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:S/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 3.1, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 1.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 1.9, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-6192", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-04-14T13:56:15.918841Z", "version": "2.0.3"}}]}, "published": "2026-04-13T17:16:32.333", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/uclouvain/openjpeg/"}, {"source": "cna@vuldb.com", "url": "https://github.com/uclouvain/openjpeg/commit/839936aa33eb8899bbbd80fda02796bb65068951"}, {"source": "cna@vuldb.com", "url": "https://github.com/uclouvain/openjpeg/issues/1619"}, {"source": "cna@vuldb.com", "url": "https://github.com/uclouvain/openjpeg/pull/1628"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/797385"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/357114"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/357114/cti"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.debian.org/debian-lts-announce/2026/05/msg00038.html"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-189"}, {"lang": "en", "value": "CWE-190"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{"bugzilla": {"description": "uclouvain/openjpeg: OpenJPEG: Denial of Service via integer overflow in opj_pi_initialise_encode", "id": "2457931", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457931"}, "csaw": false, "cvss3": {"cvss3_base_score": "3.3", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "CWE-190", "details": ["A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opj_pi_initialise_encode in the library src/lib/openjp2/pi.c. The manipulation leads to integer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. The identifier of the patch is 839936aa33eb8899bbbd80fda02796bb65068951. It is suggested to install a patch to address this issue.", "A flaw was found in uclouvain openjpeg. A local attacker can exploit an integer overflow vulnerability within the `opj_pi_initialise_encode` function. This manipulation can lead to a Denial of Service (DoS), making the affected system or application unavailable."], "name": "CVE-2026-6192", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "openjpeg2", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "openjpeg2", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "openjpeg2", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "openjpeg2", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-04-13T16:45:11Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-6192\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-6192\nhttps://github.com/uclouvain/openjpeg/\nhttps://github.com/uclouvain/openjpeg/commit/839936aa33eb8899bbbd80fda02796bb65068951\nhttps://github.com/uclouvain/openjpeg/issues/1619\nhttps://github.com/uclouvain/openjpeg/pull/1628\nhttps://vuldb.com/submit/797385\nhttps://vuldb.com/vuln/357114\nhttps://vuldb.com/vuln/357114/cti"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.5.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.5.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.5.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.5.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.5.4"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "openjpeg", "source": "cna", "vendor": "uclouvain"}, "product": "openjpeg", "vendor": "uclouvain"}], "analysis": {"en": {"generated_at": "2026-04-13T18:35:45.193657+00:00", "value": {"mitigation_remediation": ["Verify the OpenJPEG version in use; versions up to 2.5.4 are affected.", "Apply the patch identified by commit 839936aa33eb8899bbbd80fda02796bb65068951, which resolves the integer overflow.", "Rebuild or reinstall the library after patching to ensure the changes take effect.", "Confirm that the patched version is published and verify checksum or signature if available."], "summary": {"action": "Patching", "impact": "Local Integer Overflow in OpenJPEG"}, "threat_synthesis": {"affected_systems": "The vulnerability affects the OpenJPEG library from the University of Lille (uClouvain) through version 2.5.4. The issue resides in the source file src/lib/openjp2/pi.c and is mitigated in later releases.\n", "description_and_impact": "A flaw was discovered in the OpenJPEG library in the function that initializes the compression pipeline. A crafted input can trigger an integer overflow during the encoding process, potentially corrupting memory or causing a crash. The weakness corresponds to improper handling of size values, a classic integer overflow scenario. While the description does not explicitly state a code execution vector, such overflow could lead to arbitrary code execution if the attacker can manipulate the data fed to the library.\n", "risk_and_exploitability": "The CVSS score for this flaw is 4.8, indicating low to medium severity. No EPSS data is available, and the vulnerability is not listed as a known exploited vulnerability by CISA. Attackers must have local access to supply the crafted data; remote exploitation is unlikely. However, the publicly available exploit code suggests that once a user runs OpenJPEG on untrusted data locally, the integer overflow could be triggered.\n"}}}}, "created": "2026-04-14T16:18:46.859220+00:00", "updated": "2026-04-14T16:33:55.018428+00:00", "vendors": ["uclouvain", "uclouvain$PRODUCT$openjpeg"]}