VULNERABILITY INTELLIGENCE

CVE-2026-21368

CVSS score5.3 MEDIUM
EPSS probability0.08%
CISA KEVNot currently listed
Published2026-07-06
Last modified2026-10-25
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

Description

Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during validation checks.

Weakness classification

  • CWE-787: Out-of-bounds Write

Primary references