Denial of Service Vulnerabilities in jbig2dec Affect Ubuntu 22.04 LTS

Two vulnerabilities were discovered in jbig2dec, a JBIG2 decoder library, affecting Ubuntu 22.04 LTS. The first, an out-of-bounds read vulnerability (CVE-2023-46361), could cause the tool to crash, leading to denial of service. The second, an integer overflow (CVE-2026-38076), also poses a risk of denial of service. Both vulnerabilities were identified by researchers Zeng Yunxiang and Song Jiaxuan. Affected users are advised to update their systems to mitigate these issues. The vulnerabilities were disclosed on July 9, 2026, and have been addressed in recent security updates. Ubuntu Pro offers extended security coverage for affected systems.

Key Points: • Two denial of service vulnerabilities found in jbig2dec affecting Ubuntu 22.04 LTS. • CVE-2023-46361 involves an out-of-bounds read, while CVE-2026-38076 is an integer overflow. • Users are urged to update their systems to mitigate these vulnerabilities.