https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 17:41:32 +0000 https://db.gcve.eu/vuln/cve-2026-91059 <p><strong>Affected:</strong> Eclipse Foundation Eclipse ThreadX - GUIX</p> <p>The GUIX JPEG software decoder enforces no ordering on JPEG markers. A file that places a second `SOF0` frame header after `SOS` re-runs the frame header parser after the output buffer has already been allocated and its geometry latched. The decoder returns `GX_SUCCESS` and publishes a `GX_PIXELMAP` whose reported dimensions and `data_size` exceed the allocation behind it.</p> <p>Any consumer that trusts the returned structure reads out of bounds, including GUIX&#39;s own display drivers, reached through the ordinary draw path.</p> <p>Reproduces in the shipped default configuration; `GX_SOFTWARE_DECODER_SUPPORT` is enabled by default.</p> <p><strong>Affected:</strong> Eclipse Foundation Eclipse ThreadX - GUIX</p> <p>The GUIX JPEG software decoder enforces no ordering on JPEG markers. A file that places a second `SOF0` frame header after `SOS` re-runs the frame header parser after the output buffer has already been allocated and its geometry latched. The decoder returns `GX_SUCCESS` and publishes a `GX_PIXELMAP` whose reported dimensions and `data_size` exceed the allocation behind it.</p> <p>Any consumer that trusts the returned structure reads out of bounds, including GUIX&#39;s own display drivers, reached through the ordinary draw path.</p> <p>Reproduces in the shipped default configuration; `GX_SOFTWARE_DECODER_SUPPORT` is enabled by default.</p> https://db.gcve.eu/vuln/cve-2026-91059