CVE-2026-111151 Details
Description
OpenJPH through 0.32.0 contains a heap out-of-bounds write vulnerability in the HTJ2K cleanup-pass decoder that allows attackers to corrupt memory via one-row codeblocks. Attackers can supply a crafted .j2c or .jph codestream with small precinct sizes, causing the decoder to write a second row past the codeblock buffer, resulting in memory corruption and crashes.
A heap out-of-bounds write vulnerability has been identified in OpenJPH versions through 0.32.0, specifically within the High-Throughput JPEG2000 (HTJ2K) cleanup-pass decoder. This vulnerability allows attackers to corrupt memory by exploiting one-row codeblocks. By supplying a crafted .j2c or .jph codestream with small precinct sizes, attackers can cause the decoder to write a second row beyond the codeblock buffer, leading to memory corruption and crashes. The issue arises because the decoder, while processing codeblocks, writes two rows for each quad row, but the buffer allocation can be manipulated to hold only a single row, creating a mismatch that results in an out-of-bounds write.
Users can upgrade to OpenJPH version 0.32.1 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 15, 2026CISA-ADP
Assessed Oct 15, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-787 | Out-of-bounds Write | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| OpenJPH | <= 0.32.0 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 15, 2026 | CVE Modified | CISA-ADP |
| Oct 15, 2026 | New CVE Received | [email protected] |