346 matches found
libjxl 安全漏洞
libjxl is an open-source implementation of the JPEG XL image format. There is a security vulnerability in libjxl; this vulnerability arises from the decoder potentially writing pixel data to uninitialized, unallocated memory when processing specially crafted files, which may lead to information...
libjxl 安全漏洞
libjxl is an open-source implementation of the JPEG XL image format. There is a security vulnerability in libjxl, which stems from specially crafted files that may cause the decoder to read pixel data from memory without initialization, potentially leading to information leakage...
CVE-2026-1837: Buffer Access with Incorrect Length Value
A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after that data from another uninitialized unallocated region is copied to pixel data. This can be done by requesting color transformation of grayscale images to another grayscale col...
CVE-2025-12474: Use of Uninitialized Resource
A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized but allocated memory. This can be done by causing the decoder to reference an outside-image-bound area in a subsequent patches. An incorrect optimization causes the decoder to omit populating those areas...
Linux Distros Unpatched Vulnerability : CVE-2025-12474
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized but allocated memory. This can be done by causing the decoder to...
CVE-2026-1837
A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after that data from another uninitialized unallocated region is copied to pixel data. This can be done by requesting color transformation of grayscale images to another grayscale col...
PT-2026-7615
Name of the Vulnerable Software and Affected Versions libjxl affected versions not specified Description A crafted file can lead to libjxl's decoder writing pixel data to uninitialized and unallocated memory. Subsequently, data from another uninitialized region is copied to pixel data. This occur...
Astra Linux – Vulnerability in jpeg-xl
There exists an out-of-bounds read/write in LibJXL versions prior to commit 9cc451b91b74ba470fd72bd48c121e9f33d24c99. The JPEG decoder used by the JPEG XL encoder when performing JPEG recompression i.e., if using JxlEncoderAddJPEGFrame on untrusted input does not properly check bounds in the...
Astra Linux – Vulnerability in jpeg-xl
There exists a stack buffer overflow in libjxl. A specifically crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256MB, possibly up to 512MB, potentially exhausting the stack. An attacker can create a file that will lead to excessive memory usage. We recommend...
PT-2026-7614
Name of the Vulnerable Software and Affected Versions libjxl affected versions not specified Description A crafted file can lead to libjxl's decoder reading pixel data from uninitialized memory. This occurs due to an incorrect optimization that causes the decoder to omit populating certain memory...
libjxl:djxl_fuzzer: Global-buffer-overflow in void jxl::N_AVX2::WriteToOutputStage::StoreUnsignedRow<unsigned char>
Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=5167703985029120 Project: libjxl Fuzzing Engine: libFuzzer Fuzz Target: djxlfuzzer Job Type: libfuzzerasanlibjxl Platform Id: linux Crash Type: Global-buffer-overflow READ 16 Crash Address:...
libjxl:djxl_fuzzer: Global-buffer-overflow in void jxl::N_SSE4::WriteToOutputStage::StoreUnsignedRow<unsigned char>
Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=5327810488238080 Project: libjxl Fuzzing Engine: libFuzzer Fuzz Target: djxlfuzzer Job Type: libfuzzerasanlibjxl Platform Id: linux Crash Type: Global-buffer-overflow READ 16 Crash Address:...
EUVD-2021-23286
Malware in sbrugna...
EUVD-2021-23287
Malware in sbrugna...
EUVD-2022-37033
Malicious code in bioql PyPI...
EUVD-2021-9703
Malicious code in bioql PyPI...
EUVD-2023-12679
Malicious code in bioql PyPI...
EUVD-2021-32637
Malicious code in bioql PyPI...