What is GHSA-rqpx-m8w5-7hj9?

GHSA-rqpx-m8w5-7hj9 is a security advisory published by GitHub Security Advisories with Critical severity. Buffer Overflow vulnerability in OpenHTJ2K v.0.18.4 and before allows an attacker to execute...

Which CVE IDs does GHSA-rqpx-m8w5-7hj9 cover?

GHSA-rqpx-m8w5-7hj9 covers the following CVE IDs: CVE-2026-51808. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-rqpx-m8w5-7hj9?

GHSA-rqpx-m8w5-7hj9 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-rqpx-m8w5-7hj9CriticalCVSS 9.8

Buffer Overflow vulnerability in OpenHTJ2K v.0.18.4 and before allows an attacker to execute...

Vendor

GitHub Security Advisories

Published

July 15, 2026

Last Modified

July 15, 2026

🔗 CVE IDs covered (1)

CVE-2026-51808 →

📋 Description

Buffer Overflow vulnerability in OpenHTJ2K v.0.18.4 and before allows an attacker to execute arbitrary code via the openhtj2k_decoder_impl::invoke, invoke_line_based, invoke_line_based_stream, and invoke_line_based_predecoded function in source/core/interface/decoder.cpp

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-51808
https://github.com/osamu620/OpenHTJ2K/pull/320
https://github.com/osamu620/OpenHTJ2K/blob/main/CHANGELOG
https://github.com/osamu620/OpenHTJ2K/releases/tag/v0.18.5
https://github.com/advisories/GHSA-rqpx-m8w5-7hj9