Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
cleanstart/jbig2dec may run malicious code
published 4 days ago
Summary
The jbig2dec library used by cleanstart/jbig2dec has a weakness in its image handling routine. An attacker could supply a specially crafted image that causes the program to execute unwanted code, potentially compromising the system. Update to the latest version of jbig2dec or apply the vendor’s patch as soon as possible.
What to do
- Update cleanstart jbig2dec to version 0.18-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | jbig2dec |
< 0.18-r0 Fix: upgrade to 0.18-r0
|
Original advisory text
jbig2_image_compose in jbig2_image
Security vulnerability affects the jbig2dec package. jbig2_image_compose in jbig2_image.
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2023-SY87086 · OSV
Track software like this
Free during beta