CVE-2026-6192

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opj_pi_initialise_encode in the library src/lib/openjp2/pi.c. The manipulation leads to integer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. The identifier of the patch is 839936aa33eb8899bbbd80fda02796bb65068951. It is suggested to install a patch to address this issue.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-189CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Apr 13, 2026
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-619206.6Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to CVE-2026-619216.5Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.CVE-2026-619237.8Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.CVE-2026-619247.5Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.CVE-2026-619257.8Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.CVE-2026-619267.8Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.CVE-2026-619277.0Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.CVE-2026-619285.5Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally.CVE-2026-619297.0Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-61937.3A security flaw has been discovered in PHPGurukul Daily Expense Tracking System 1.1. Affected is an unknown function of the file /register.pCVE-2026-619307.8Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-619317.8Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.
CVE-2026-6192: Low severity, CVSS 3.3 | Vulnix