CVE-2026-116671
CVE-2026-116671 · Infinite loop in Xpdf due to missing validation in JPEG 2000 decoder
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image.
CVSS 2.1 · Low · EPSS 0.1%
- Published
- Updated
Stack: system
Affected products and versions
xpdf
- Versions
- ≥ 0, ≤ 4.06: Affected (Version)
No fix published
ipe Ubuntu:16.04:LTS
- Versions
- 7.1.4-2.1
- 7.1.8-1
- 7.1.10-1
- 7.1.10-1.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xpdf Ubuntu:16.04:LTS
- Versions
- 3.03-17ubuntu2
- 3.03-17ubuntu3
- 3.03-17ubuntu5
- 3.03-18
- 3.04-1
- 3.04-1build1
- 3.04-1ubuntu1
- 3.04-1ubuntu1.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ipe Ubuntu:18.04:LTS
- Versions
- 7.2.7-2
- 7.2.7-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xpdf Ubuntu:18.04:LTS
- Versions
- 3.04-4build1
- 3.04-5
- 3.04-5ubuntu2
- 3.04-6ubuntu1
- 3.04-7
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ipe Ubuntu:20.04:LTS
- Versions
- 7.2.9-1
- 7.2.13-2
- 7.2.13-2build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ipe Ubuntu:22.04:LTS
- Versions
- 7.2.23+dfsg1-2
- 7.2.24+dfsg1-1
- 7.2.24+dfsg1-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xpdf Ubuntu:22.04:LTS
- Versions
- 3.04+git20210103-3build1
- 3.04+git20211021-1
- 3.04+git20211021-1ubuntu1
- 3.04+git20220201-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ipe Ubuntu:24.04:LTS
- Versions
- 7.2.27+dfsg1-2
- 7.2.28-2
- 7.2.28-2.1build2
- 7.2.28-2.1build3
- 7.2.28-2.1build4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xpdf Ubuntu:24.04:LTS
- Versions
- 3.04+git20220601-1ubuntu1
- 3.04+git20220601-1ubuntu2
- 3.04+git20231213-1
- 3.04+git20240118-1
- 3.04+git20240124-1
- 3.04+git20240202-1
- 3.04+git20240202-1build1
- 3.04+git20240202-1build2
- 3.04+git20240202-1build3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ipe Ubuntu:26.10
- Versions
- 7.2.30-1build2
- 7.2.30-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xpdf Ubuntu:26.10
- Versions
- 3.04+git20260220-1
- 3.04+git20260220-1ubuntu1
- 3.04+git20260802-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ipe Ubuntu:26.04:LTS
- Versions
- 7.2.30-1build1
- 7.2.30-1build2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xpdf Ubuntu:26.04:LTS
- Versions
- 3.04+git20250304-1
- 3.04+git20250304-1build1
- 3.04+git20260220-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published