What’s Vulnerable › Vulnerabilities
CVE-2026-92454: JPEG decoder: truncated segments are read past the image buffer, and a zero sampling factor hangs the decode
- Severity: medium (CVSS 6.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-10-20 · updated 2026-10-20
- Weakness: CWE-125
Description
The GUIX software JPEG decoder reads four kinds of marker segment without checking that each is long enough to hold what it reads. A truncated segment is therefore read past the end of the caller's image buffer. Separately, a zero chroma sampling factor makes the block decode loop non-terminating. Both reproduce in the default configuration, in which `GX_SOFTWARE_DECODER_SUPPORT` is enabled.
Affected products
- Eclipse Foundation Eclipse ThreadX - GUIX: through 6.5.1.202602a
References
Get alerted when CVE-2026-92454 or the next vulnerability affects your stack