CVE-2026-116095 Details
Description
A vulnerability was identified in smg-project smg 1.7.0/1.8.0/1.9.0/1.10.0/1.10.1. Affected is the function jpeg_turbo::decode_jpeg_rgb of the file crates/multimodal/src/jpeg_turbo.rs of the component llm-multimodal. The manipulation leads to uncontrolled memory allocation. The attack can be initiated remotely. The exploit is publicly available and might be used. Upgrading to version 1.11.0 is able to address this issue. The identifier of the patch is 8f51b57e219a914089e345b704c3c8de37a3bb8e. It is advisable to upgrade the affected component.
A vulnerability in the SMG project, specifically in versions 1.7.0 through 1.10.1, allows for uncontrolled memory allocation during JPEG image processing. The issue arises in the 'jpeg_turbo::decode_jpeg_rgb' function within the 'llm-multimodal' component. When the JPEG header specifies certain dimensions, it can trigger excessive memory allocation, leading to potential denial-of-service conditions. This vulnerability can be exploited remotely, and a public exploit is available.
Users are advised to upgrade to SMG version 1.11.0, which addresses the vulnerability by implementing a cap on the decoded size in the JPEG decoding function.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 25, 2026CISA-ADP
Assessed Oct 29, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/smg-project/smg/issues/2361 | CISA-ADP | ExploitIssue TrackingTechnical DescriptionVendor |
| https://gist.github.com/Yunzez/24a1bf4c226fbc324ea8da1d202c6d9b | [email protected] | Exploit |
| https://github.com/smg-project/smg/ | [email protected] | Vendor |
| https://github.com/smg-project/smg/commit/8f51b57e219a914089e345b704c3c8de37a3bb8e | [email protected] | Source CodeVendor |
| https://github.com/smg-project/smg/issues/2361 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/smg-project/smg/pull/2569 | [email protected] | Issue TrackingVendor |
| https://github.com/smg-project/smg/releases/tag/v1.11.0 | [email protected] | Release NotesVendor |
| https://vuldb.com/cve/CVE-2026-116095 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/submit/1000796 | [email protected] | Permission Required |
| https://vuldb.com/vuln/426162 | [email protected] | Permission Required |
| https://vuldb.com/vuln/426162/cti | [email protected] | Content Wall |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-400 | Uncontrolled Resource Consumption | [email protected] |
| CWE-789 | Memory Allocation with Excessive Size Value | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| smg-project smg | 1.7.0 (semver) 1.8.0 (semver) 1.9.0 (semver) 1.10.0 (semver) 1.10.1 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 29, 2026 | CVE Modified | CISA-ADP |
| Oct 25, 2026 | New CVE Received | [email protected] |