CVE-2026-6192 Details
Description
A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opj_pi_initialise_encode in the library src/lib/openjp2/pi.c. The manipulation leads to integer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. The identifier of the patch is 839936aa33eb8899bbbd80fda02796bb65068951. It is suggested to install a patch to address this issue.
A vulnerability exists in uClouvain OpenJPEG versions through 2.5.4, specifically in the encoding function 'opj_pi_initialise_encode' within 'src/lib/openjp2/pi.c'. This vulnerability is caused by an integer overflow in the 'include_size' variable, which is calculated through a series of 32-bit multiplications without proper overflow checks. When certain encoding parameters exceed a specific threshold, the result wraps around, leading to a heap buffer allocation that is smaller than required. This misallocation allows for subsequent out-of-bounds access to the 'include' array, potentially causing memory corruption.
Users are advised to update to OpenJPEG version 2.5.4 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Apr 13, 2026CISA-ADP
Assessed Apr 14, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://lists.debian.org/debian-lts-announce/2026/05/msg00038.html | CVE | |
| https://github.com/uclouvain/openjpeg/ | [email protected] | Vendor |
| https://github.com/uclouvain/openjpeg/commit/839936aa33eb8899bbbd80fda02796bb65068951 | [email protected] | Source CodeVendor |
| https://github.com/uclouvain/openjpeg/issues/1619 | [email protected] | ExploitIssue TrackingTechnical AnalysisVendor |
| https://github.com/uclouvain/openjpeg/pull/1628 | [email protected] | Issue TrackingVendor |
| https://vuldb.com/submit/797385 | [email protected] | Technical Description |
| https://vuldb.com/vuln/357114 | [email protected] | AdvisoryExploitRemedy |
| https://vuldb.com/vuln/357114/cti | [email protected] | Content Wall |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-189 | Numeric Errors | [email protected] |
| CWE-190 | Integer Overflow or Wraparound | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| uclouvain openjpeg | <= 2.5.4 (semver) |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 21, 2026 | CVE Modified | CVE |
| Apr 29, 2026 | Data Remediation | [email protected] |
| Apr 13, 2026 | New CVE Received | [email protected] |