CVE-2026-28956-jxl-messages-surface

JPEG XL auto-decodes in the iOS Messages preview path A delivery-surface finding for CVE-2026-28956 AppleJPEGXL, plus the patch-diff attribution and a reliability reality-check on the public PoC. TL;DR — Conventional wisdom and our own prior measurement with EXR is that iOS Messages renders...

libvips:sharpen_fuzzer: Segv on unknown address in jxl::N_AVX2::XYBStage<jxl::N_AVX2::PerChannelOp<jxl::N_AVX2::Op709> >::ProcessRo

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=6150953935437824 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: sharpenfuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash Stat...