Description
imagecodecs 2023.1.23 through 2026.10.10 contains a stack-based buffer overflow vulnerability in the lossless JPEG Define Huffman Table parser in decode_jpegsof3(). Attackers can supply a crafted lossless JPEG whose DHT symbol counts wrap an 8-bit sum, overflowing the 32-entry HufVal and HufSz stack arrays and crashing the calling process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| cgohlke | imagecodecs | 2023.1.23 – ≤ 2026.10.10 | — |
References
- GitHub Issue #157 issue-tracking
- https://github.com/cgohlke/imagecodecs/blob/v2026.10.10/3rdparty/jpegsof3/jpegsof3.cpp#L394 technical-description
- https://github.com/cgohlke/imagecodecs product
- VulnCheck Advisory: imagecodecs 2023.1.23 through 2026.10.10 Stack Buffer Overflow via jpegsof3_decode() third-party-advisory