https://vulnerability.circl.lu/sightings/feed 2026-07-16T20:00:56.046746+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/8d48da8f-e5d5-492f-8493-150fb2d0af1a/export 2026-07-16T20:00:56.063303+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8d48da8f-e5d5-492f-8493-150fb2d0af1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38076", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdg5rrfll2w", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-38076: \u0443\u0433\u0440\u043e\u0437\u0430 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437-\u0437\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0446\u0435\u043b\u043e\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0432 Artifex\n\n\n\nhttps://kripta.biz/posts/62F76088-100B-4A5F-A1CB-FFA81EB775F0", "creation_timestamp": "2026-07-11T00:35:08.960694Z"} 2026-07-11T00:35:08.960694+00:00 https://vulnerability.circl.lu/sighting/7c01b870-869b-4078-83c3-e090af8d39a1/export 2026-07-16T20:00:56.064817+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "7c01b870-869b-4078-83c3-e090af8d39a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38076", "type": "seen", "source": "https://gist.github.com/dkjsone/c237b83ffa9ebd7028b5db7f410fcf78", "content": "[CVE ID]\nCVE-2026-38076\n\n[Vendor of Product]\nArtifex\n\n[Suggested description]\nAn integer overflow in the jbig2_arith_iaid_ctx_new() function of\nArtifex commit cc37d0 allows attackers to cause a Denial of Service\n(DoS) via a crafted input.\n\n[Vulnerability Type]\nInteger Overflow\n\n[Affected Product Code Base]\nhttps://github.com/ArtifexSoftware/jbig2dec - Versions prior to https://github.com/ArtifexSoftware/jbig2dec/commit/cc37d0931aa71582f7128736a068c92cd8712d9b are vulnerable.\n\n[Affected Component]\njbig2_arith_iaid.c, jbig2_arith_iaid_ctx_new(), jbig2_arith_iaid_decode()\n\n[Attack Type]\nLocal\n\n[Impact Denial of Service]\ntrue\n\n[Attack Vectors]\nRemote attackers can exploit this vulnerability by crafting a malicious JBIG2 image file. When a victim application (e.g., MuPDF) parses this file, the insufficient validation of SBSYMCODELEN triggers a signed integer overflow in the decoding loop, leading to an out-of-bounds memory access and application crash (Denial of Service).\n\n[Has vendor confirmed or acknowledged the vulnerability?]\ntrue\n\n[Discoverer]\ndkjsone@gmail.com\n\n[Reference]\nhttp://artifex.com\nhttps://github.com/ArtifexSoftware/jbig2dec", "creation_timestamp": "2026-07-06T07:51:10.434300Z"} 2026-07-06T07:51:10.434300+00:00