Ubuntu 26.04 LTS OpenJPEG Important Memory Issue CVE-2026-6192

ubuntu

May 7, 2026

OpenJPEG could be made to crash or run programs when encoding image files.

Summary

OpenJPEG could be made to crash or run programs when encoding image files.

Software Description:

- openjpeg2: JPEG 2000 image compression/decompression library

Details:

It was discovered that OpenJPEG did not properly handle memory when

encoding image files. An attacker could use this issue to cause OpenJPEG to

crash, resulting in a denial of service, or possibly execute arbitrary

code.

Topics Covered

security advisory denial of service Ubuntu important memory issue openjpeg

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  libopenjp2-7                    2.5.4-1ubuntu0.1

Ubuntu 25.10
  libopenjp2-7                    2.5.3-2.1ubuntu0.1

Ubuntu 24.04 LTS
  libopenjp2-7                    2.5.0-2ubuntu0.5

Ubuntu 22.04 LTS
  libopenjp2-7                    2.4.0-6ubuntu0.5

In general, a standard system update will make all the necessary changes.