CVE-2026-53532: Openjph Assert Sqcd Quantization Style

Using assert() to validate the quantization style bits (Sqcd & 0x1F) in JPEG2000/HTJ2K codestreams causes an unconditional process crash (DoS) on malformed input. Use runtime validation with error handling instead.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0C
greprules fetch cve-2026-53532-openjph-assert-sqcd-quantization-style --engine opengrep

Description

Using assert() to validate the quantization style bits (Sqcd & 0x1F) in JPEG2000/HTJ2K codestreams causes an unconditional process crash (DoS) on malformed input. Use runtime validation with error handling instead.