CVE-2026-51808

Name of the Vulnerable Software and Affected Versions OpenHTJ2K versions prior to 0.18.4

Description A buffer overflow allows an attacker to execute arbitrary code. The issue exists within the openhtj2k decoder impl::invoke, invoke line based, invoke line based stream, and invoke line based predecoded functions located in source/core/interface/decoder.cpp.

Recommendations Update OpenHTJ2K to a version newer than 0.18.4. As a temporary workaround, restrict the use of the openhtj2k decoder impl::invoke, invoke line based, invoke line based stream, and invoke line based predecoded functions.