Skip to main content
Version: v1.1.x

CVE-2026-42250

CVE Details

Visit the official vulnerability details page for CVE-2026-42250 to learn more.

Initial Publication

05/28/2026

Last Update

06/17/2026

Third Party Dependency

bzip2-libs

NIST CVE Summary

bzip2 contains an off‑by‑one error in the bzip2recover utility. When processing a specially crafted file, the application performs an out‑of‑bounds write to a global buffer, resulting in memory corruption and a crash (denial of service).

This issue was fixed in bzip2 patch 35d122a3df8b0cc4082a4d89fdc6ee99f375fe67

CVE Severity

4.8

Our Official Summary

Investigation is ongoing to determine how this vulnerability affects our products.

Status

Awaiting Analysis

Affected Products & Versions

VersionPaletteAIPaletteAI VerteX
1.1.8⚠️ Impacted⚠️ Impacted

Revision History

No revisions available.