CVE-2026-51808
CRITICALOpenHTJ2K < 0.18.5 - Remote Code Execution via Buffer Overflow in Decoder Functions
Title source: llmDescription
Buffer Overflow vulnerability in OpenHTJ2K v.0.18.4 and before allows an attacker to execute arbitrary code via the openhtj2k_decoder_impl::invoke, invoke_line_based, invoke_line_based_stream, and invoke_line_based_predecoded function in source/core/interface/decoder.cpp
Scores
CVSS v3
9.8
EPSS
0.0048
EPSS Percentile
38.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
yes
Technical Impact
total
Details
CWE
CWE-120
Status
published
Published
Jul 14, 2026
Tracked Since
Jul 15, 2026