CVE-2026-38076: Integer Overflow
Published Jul 9, 2026
·Updated
An integer overflow in the jbig2arithiaidctxnew() function of Artifex commit cc37d0 allows attackers to cause a Denial of Service (DoS) via a crafted input.
Affected Software
2 affected components
Artifex Artifex
debian/jbig2dec<=0.19-2, <=0.19-3, <=0.20-1
Event History
Jul 9, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·10:17 PM
DescriptionSeverityWeakness
Jul 21, 2026
Data Sourced
via Ubuntu·07:15 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Launchpad·07:17 PM
Description
Data Sourced
via Debian·07:17 PM
DescriptionAffected Software