CVE-2026-107080 | uclouvain OpenJPEG 2.4.0/2.5.4 DWT src/lib/openjp2/dwt.c opj_dwt_encode_and_deinterleave_v out-of-bounds (8314119b)

October 26, 2026 Yanac

A vulnerability has been found in uclouvain OpenJPEG 2.4.0/2.5.4 and classified as critical. Affected is the function opj_dwt_encode_and_deinterleave_v of the file src/lib/openjp2/dwt.c of the component DWT. Performing a manipulation results in out-of-bounds read.

This vulnerability was named CVE-2026-107080. The attack may be initiated remotely. There is no available exploit.

It is suggested to install a patch to address this issue.VulDB Recent EntriesRead More