CVE-2021-36692

2021-08-3021:15:09

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.6%

JSON

libjxl v0.3.7 is affected by a Divide By Zero in issue in lib/extras/codec_apng.cc jxl::DecodeImageAPNG(). When encoding a malicous APNG file using cjxl, an attacker can trigger a denial of service.

CPENameOperatorVersion
libjxleq0.3.5
libjxleq0.1
libjxleq0.3.6
libjxleq0.1.0
libjxleq0.3.1
libjxleq0.2
libjxleq0.3.3
libjxleq0.3
libjxleq0.3.7
libjxleq0.3.2