OSV-2026-91
NoneCVSS
—
EPSS
—
Published
Jan 20, 2026
CISA due date
—
The record
Use-after-poison in compress.cc
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| OSS-Fuzz | libjpeg-turbo | 43b0c0536bde8d367f5031e7990228928650c5b3 | 3eb879acf4ce1efb4750688e864af172d34a4e0a |