JPEG Decoder Vulnerability in GUIX Software by Eclipse Foundation

CVE-2026-92454

What is CVE-2026-92454?

The JPEG decoder in GUIX software processes marker segments without validating their length, potentially leading to buffer overflows. This issue arises when the decoder reads truncated segments, allowing access beyond the designated image buffer. Additionally, if the chroma sampling factor is set to zero, it can result in an infinite loop during the block decode process. Users are advised to review configurations and ensure safety measures are in place.

References