{"id":"CVE-2026-116671","aliases":[],"cve":{"records":[{"id":"CVE-2026-116671","source":"GandC","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-26T19:49:20.183Z","published":"2026-10-26T20:10:20.067Z","modified":"2026-10-26T20:10:20.067Z"}],"publishers":[{"name":"GandC","role":"CNA","organizationId":"ace9cabe-4f4f-416b-8c39-b0e002761924","modified":"2026-10-26T20:10:20.067Z"}],"references":[{"url":"https://www.xpdfreader.com/security-bug/CVE-2026-116671.html","tags":[],"source":"GandC"}],"weaknesses":[{"id":"CWE-20","description":"CWE-20 Improper input validation","source":"GandC"},{"id":"CWE-835","description":"CWE-835 Loop with unreachable exit condition ('infinite loop')","source":"GandC"}],"applicability":[],"prioritization":[]},"title":"Infinite loop in Xpdf due to missing validation in JPEG 2000 decoder","titleSource":"GandC","descriptionSource":"GandC","description":"Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image.","score":2.1,"severity":"low","published":"2026-10-26T20:10:20.067Z","modified":"2026-10-26T20:10:20.067Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Xpdf","name":"Xpdf","platforms":["all"],"versions":[{"version":"0","status":"affected","lessThanOrEqual":"4.06","versionType":"Version"}],"defaultStatus":"unaffected","cpes":[],"source":"GandC","url":"https://www.cve.org/CVERecord?id=CVE-2026-116671"}],"remediation":[],"references":["https://www.xpdfreader.com/security-bug/CVE-2026-116671.html"],"sources":[{"name":"CVE","id":"CVE-2026-116671","modified":"2026-10-26T20:10:20.067Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-116671"}],"assessments":[{"source":"GandC","vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","score":2.1}],"sourceAffected":[],"observedAt":"2026-10-29T14:35:23.256Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T08:55:34.575Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[],"aiSummary":{"text":"Xpdf versions 4.06 and earlier have an infinite loop vulnerability due to missing validation in the JPEG 2000 decoder. The issue is caused by incorrect validation of the progression order field in JPEG 2000 images. An attacker with access to the system can potentially exploit this weakness.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:13:40.387Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-116671"}]}}