CVE Catalog
CVE-2026-21368
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.09%
1th percentile - higher than 1% of all known CVEs
Summary
Memory corruption occurs when parsing JPEG commands due to unaccounted extra writes to the buffer during validation checks.
Risk Assessment
An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service, compromising system confidentiality, integrity, and availability.
Recommendation
Immediately update the JPEG library to the latest patched version and implement input validation mechanisms.
Original NVD description (English source)
Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during validation checks.