UBUNTU-CVE-2026-116671: Low severity ubuntu/ipe vulnerability

Published Oct 26, 2026

Updated

Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image.

Affected Software

13 affected components

ubuntu/ipe*

ubuntu/xpdf*

ubuntu/ipe*

ubuntu/xpdf*

ubuntu/ipe*

ubuntu/xpdf*

ubuntu/ipe*

ubuntu/xpdf*

ubuntu/ipe*

ubuntu/xpdf*

ubuntu/ipe*

ubuntu/xpdf*

Event History

Oct 26, 2026

CVE Published

via OSV·09:18 PM

Data Sourced

via OSV·09:18 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What would an attacker need to do to trigger the issue?

They would need to cause Xpdf to process a JPEG 2000 image with an invalid progression order field. The available data does not identify a remote delivery path or required user interaction.

What is the practical impact of successful exploitation?

Successful triggering can cause an infinite loop, resulting in reduced availability of the affected process. The supplied severity vector indicates no impact on confidentiality or integrity.

Which software should be reviewed?

Review Ubuntu installations using the ipe or xpdf packages. The issue is described as affecting Xpdf 4.06 and earlier.

UBUNTU-CVE-2026-116671: Low severity ubuntu/ipe vulnerability

Affected Software

Event History

Frequently Asked Questions

What would an attacker need to do to trigger the issue?

What is the practical impact of successful exploitation?

Which software should be reviewed?

Company

Resources

Contact

Frequently Asked Questions

What would an attacker need to do to trigger the issue?

What is the practical impact of successful exploitation?

Which software should be reviewed?