DSA-6488-1 jbig2dec - security update

Details

Source

Debian Security Advisories (INTL · vendor-psirt · site)

Severity

unknown

Published

2026-09-07

Exploitation

Not in CISA KEV at last sync

Original advisory: https://lists.debian.org/debian-security-announce/2026/msg00399.html

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

• Low exploitation riskCVE-2026-380760.61% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 47% of all EPSS-scored CVEs.

Referenced CVEs

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

• unknownUSN-8582-1: jbig2dec vulnerabilitiesubuntu
• highCVE-2026-38076: An integer overflow in the jbig2_arith_iaid_ctx_new() function of Artifex commit cc37d0 allows…nvd

More from Debian Security Advisories

• unknownDSA-6491-1 slurm-wlm - security update2026-09-09
• unknownDSA-6489-1 gst-plugins-base1.0 - security update2026-09-08
• unknownDSA-6490-1 fort-validator - security update2026-09-08
• unknownDSA-6487-1 strongswan - security update2026-09-07
• unknownDSA-6486-1 libde265 - security update2026-09-06