Skip to main content

CVE-2026-42250

CVE Details​

Visit the official vulnerability details page for CVE-2026-42250 to learn more.

Initial Publication​

05/28/2026

Last Update​

06/17/2026

Third Party Dependency​

bzip2-libs

NIST CVE Summary​

bzip2 contains an off‑by‑one error in the bzip2recover utility. When processing a specially crafted file, the application performs an out‑of‑bounds write to a global buffer, resulting in memory corruption and a crash (denial of service).

This issue was fixed in bzip2 patch 35d122a3df8b0cc4082a4d89fdc6ee99f375fe67

CVE Severity​

4.8

Our Official Summary​

Investigation is ongoing to determine how this vulnerability affects our products.

Status​

Awaiting Analysis

Affected Products & Versions​

VersionPaletteAIPaletteAI VerteX
1.4.0⚠️ Impacted⚠️ Impacted
1.3.2⚠️ Impacted⚠️ Impacted
1.2.2⚠️ Impacted⚠️ Impacted

Revision History​

No revisions available.