PT-2026-58862 · Openhtj2K · Openhtj2K

Published 2026-07-14 · Updated 2026-07-15 · CVE-2026-51807

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions OpenHTJ2K versions prior to 0.18.5

Description A buffer overflow exists that allows an attacker to execute arbitrary code. The issue occurs within the j2k precinct subband::parse packet header() function located in source/core/coding/coding units.cpp.

Recommendations Update to a version newer than 0.18.4.

Related Identifiers

CVE-2026-51807

Affected Products

Openhtj2K

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-51807 · Security Note
• https://github.com/osamu620/OpenHTJ2K/commit/0778b93 · Note
• https://github.com/osamu620/OpenHTJ2K/releases · Note
• https://github.com/osamu620/OpenHTJ2K/blob/main/CHANGELOG · Note
• https://twitter.com/VulmonFeeds/status/2077188099386298480 · Twitter Post