A flaw in the GUIX JPEG decoder reads four types of marker segments without checking that the segment is long enough, allowing a truncated segment to be read past the caller’s image buffer. In addition, a zero chroma sampling factor causes the block decode loop to run indefinitely, resulting in a hang. Together, these issues can lead to information disclosure from an overread and a denial‑of‑service condition from the infinite loop. The weaknesses are represented by CWE‑125 (Out‑of‑Bounds Read) and CWE‑835 (Infinite Loop).

The vulnerability affects the Eclipse ThreadX – GUIX product from Eclipse Foundation. It is present in any release that includes the default configuration where GX_SOFTWARE_DECODER_SUPPORT is enabled. No specific version information is supplied, so all current builds using the default decoder should be considered vulnerable until a fix is applied.

The CVSS score of 6.8 indicates moderate severity. The EPSS score is not available, so the exploitation probability is unknown. The vulnerability is not listed in CISA KEV, implying no known public exploits at this time. Attackers would need to supply a crafted JPEG file containing truncated marker segments or a zero chroma sampling factor to trigger the issue, which can be done locally or remotely if the application accepts external image inputs. The flaw does not provide privilege escalation or direct code execution. The primary risk is a denial‑of‑service or potential information exposure from the buffer overread.