CVE-2026-116095

A vulnerability was identified in smg-project smg 1.7.0/1.8.0/1.9.0/1.10.0/1.10.1. Affected is the function jpeg_turbo::decode_jpeg_rgb of the file crates/multimodal/src/jpeg_turbo.rs of the component llm-multimodal. The manipulation leads to uncontrolled memory allocation. The attack can be initiated remotely. The exploit is publicly available and might be used. Upgrading to version 1.11.0 is able to address this issue. The identifier of the patch is 8f51b57e219a914089e345b704c3c8de37a3bb8e. It is advisable to upgrade the affected component.

CVSS v3 5.3 MEDIUM
CVSS v2.0 5.0 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
https://gist.github.com/Yunzez/24a1bf4c226fbc324ea8da1d202c6d9b
https://github.com/smg-project/smg/
https://github.com/smg-project/smg/commit/8f51b57e219a914089e345b704c3c8de37a3bb8e
https://github.com/smg-project/smg/issues/2361
https://github.com/smg-project/smg/pull/2569
https://github.com/smg-project/smg/releases/tag/v1.11.0
https://vuldb.com/cve/CVE-2026-116095
https://vuldb.com/submit/1000796
https://vuldb.com/vuln/426162
https://vuldb.com/vuln/426162/cti
https://github.com/smg-project/smg/issues/2361

Configurations

No configuration.

History

29 Oct 2026, 17:18

Type	Values Removed	Values Added
References	~~() https://github.com/smg-project/smg/issues/2361 -~~	() https://github.com/smg-project/smg/issues/2361 -

25 Oct 2026, 23:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-10-25 23:17

Updated : 2026-10-29 17:18

NVD link : CVE-2026-116095

Mitre link : CVE-2026-116095

CVE.ORG link : CVE-2026-116095

JSON object : View

Products Affected

No product.

CWE

CWE-400

Uncontrolled Resource Consumption

CWE-789

Memory Allocation with Excessive Size Value

{"id": "CVE-2026-116095", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-116095", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-29T16:25:53.426367Z"}}], "cvssMetricV2": [{"type": "Secondary", "source": "cna@vuldb.com", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Secondary", "source": "cna@vuldb.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}], "cvssMetricV40": [{"type": "Secondary", "source": "cna@vuldb.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 5.5, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "PROOF_OF_CONCEPT", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "cna@vuldb.com", "affectedData": [{"cpes": ["cpe:2.3:a:smg-project:smg:*:*:*:*:*:*:*:*"], "vendor": "smg-project", "modules": ["llm-multimodal"], "product": "smg", "versions": [{"status": "affected", "version": "1.7.0"}, {"status": "affected", "version": "1.8.0"}, {"status": "affected", "version": "1.9.0"}, {"status": "affected", "version": "1.10.0"}, {"status": "affected", "version": "1.10.1"}, {"status": "unaffected", "version": "1.11.0"}]}]}], "published": "2026-10-25T23:17:41.220", "references": [{"url": "https://gist.github.com/Yunzez/24a1bf4c226fbc324ea8da1d202c6d9b", "source": "cna@vuldb.com"}, {"url": "https://github.com/smg-project/smg/", "source": "cna@vuldb.com"}, {"url": "https://github.com/smg-project/smg/commit/8f51b57e219a914089e345b704c3c8de37a3bb8e", "source": "cna@vuldb.com"}, {"url": "https://github.com/smg-project/smg/issues/2361", "source": "cna@vuldb.com"}, {"url": "https://github.com/smg-project/smg/pull/2569", "source": "cna@vuldb.com"}, {"url": "https://github.com/smg-project/smg/releases/tag/v1.11.0", "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/cve/CVE-2026-116095", "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/submit/1000796", "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/vuln/426162", "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/vuln/426162/cti", "source": "cna@vuldb.com"}, {"url": "https://github.com/smg-project/smg/issues/2361", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "cna@vuldb.com", "description": [{"lang": "en", "value": "CWE-400"}, {"lang": "en", "value": "CWE-789"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability was identified in smg-project smg 1.7.0/1.8.0/1.9.0/1.10.0/1.10.1. Affected is the function jpeg_turbo::decode_jpeg_rgb of the file crates/multimodal/src/jpeg_turbo.rs of the component llm-multimodal. The manipulation leads to uncontrolled memory allocation. The attack can be initiated remotely. The exploit is publicly available and might be used. Upgrading to version 1.11.0 is able to address this issue. The identifier of the patch is 8f51b57e219a914089e345b704c3c8de37a3bb8e. It is advisable to upgrade the affected component."}], "lastModified": "2026-10-29T17:18:02.570", "sourceIdentifier": "cna@vuldb.com"}