Skip to main content
Version: v1.1.x

CVE-2026-42250

CVE Details

Visit the official vulnerability details page for CVE-2026-42250 to learn more.

Initial Publication

05/28/2026

Last Update

06/05/2026

Third Party Dependency

bzip2-libs

NIST CVE Summary

bzip2 contains an off‑by‑one error in the bzip2recover utility. When processing a specially crafted file, the application performs an out‑of‑bounds write to a global buffer, resulting in memory corruption and a crash (denial of service).

This issue was fixed in bzip2 patch 35d122a3df8b0cc4082a4d89fdc6ee99f375fe67

CVE Severity

0

Our Official Summary

Investigation is ongoing to determine how this vulnerability affects our products.

Status

Awaiting Analysis

Affected Products & Versions

VersionPaletteAIPaletteAI VerteX
1.1.4⚠️ Impacted⚠️ Impacted
1.0.7⚠️ Impacted⚠️ Impacted

Revision History

No revisions available.