Out-of-bounds Read Vulnerability in GUIX JPEG Decoder by GUIX

CVE-2026-91059

What is CVE-2026-91059?

The GUIX JPEG software decoder lacks proper enforcement of marker ordering, allowing a specific condition where a JPEG file can contain a second SOF0 frame header after an SOS marker. This leads to a reallocation of the frame header parser once the output buffer is already set, resulting in the creation of a GX_PIXELMAP that misrepresents its own dimensions and data size. Such a flaw may permit unauthorized reading beyond allocated memory boundaries, particularly affecting consumers that trust the returned structures, including GUIX’s own display drivers, thus posing significant security implications.

References