Known Vulnerabilities for Jpeg Xl by Jpeg
Listed below are 1 of the newest known vulnerabilities associated with "Jpeg Xl" by "Jpeg".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-116671 json | Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image. | Not Provided | 2026-10-26 | 2026-10-26 |
| CVE-2026-116179 json | vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API clients to bypass the video/jpeg ... | Not Provided | 2026-10-25 | 2026-10-26 |
| CVE-2026-114402 json | Trudesk through 1.2.11 contains a path traversal and authorization bypass vulnerability in accountsController.uploadImage tha... | Not Provided | 2026-10-21 | 2026-10-27 |
| CVE-2026-112897 json | Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow can return uninitialized memory as pixels when libtiff pe... | Not Provided | 2026-10-19 | 2026-10-22 |
| CVE-2026-112403 json | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer size... | Not Provided | 2026-10-19 | 2026-10-22 |
| CVE-2026-112398 json | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write decoded scanlines beyond t... | Not Provided | 2026-10-19 | 2026-10-22 |
| CVE-2026-112257 json | A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and... | Not Provided | 2026-10-19 | 2026-10-20 |
| CVE-2026-110839 json | FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based out-of-bounds write in winpr_convert... | Not Provided | 2026-10-14 | 2026-10-15 |
| CVE-2026-110766 json | Colanode server through 0.4.7 contains a path traversal vulnerability that allows authenticated users to read arbitrary .jpeg... | Not Provided | 2026-10-14 | 2026-10-14 |
| CVE-2026-109939 json | FreeRDP 3.27.1 before 3.32.0 contains a NULL pointer dereference in update_read_cache_bitmap_v3_order() in libfreerdp/core/or... | Not Provided | 2026-10-13 | 2026-10-13 |