CVE-2026-116671
Infinite loop in Xpdf due to missing validation in JPEG 2000 decoder
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image.
| CWE | CWE-20 CWE-835 |
| Vendor | xpdf |
| Product | xpdf |
| Published | Oct 26, 2026 |
Stay Ahead of the Next One
Get instant alerts for xpdf xpdf
Be the first to know when new unknown vulnerabilities affecting xpdf xpdf are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Xpdf / Xpdf
0 ≤ 4.06
References
Credits
Mateusz Waliszewski and Artur Mattern