EUVD-2023-39787

Malicious code in bioql PyPI...

The vulnerability of the Libjxl library, related to reading beyond memory boundaries, allows attackers to gain access to confidential information.

The vulnerability of the Libjxl library is related to reading data outside of the memory boundaries. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...

ROS-20250807-03

Libjxl library vulnerability is related to boundary conditions when working with EXIF files. Exploitation The vulnerability could allow a remote attacker to gain access to potentially sensitive information...

The vulnerability of the JPEG XL decoder in the Libjxl library, allowing attackers to trigger a service denial

The vulnerability of the JPEG XL decoder in the Libjxl library is related to an uncontrolled resource consumption due to buffer overflow on the stack. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

libjxl:streaming_fuzzer: Heap-buffer-overflow in jxl::FindBestPatchDictionary

Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=5409468861186048 Project: libjxl Fuzzing Engine: libFuzzer Fuzz Target: streamingfuzzer Job Type: libfuzzerasanlibjxl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

Ubuntu: Security Advisory (USN-7637-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 24.04 LTS : libjxl vulnerabilities (USN-7637-1)

The remote Ubuntu 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7637-1 advisory. It was discovered that libjxl did not perform proper bounds checking when parsing Exif tags. An attacker could possibly use this issue to cause libjxl to...

USN-7637-1: libjxl vulnerabilities

It was discovered that libjxl did not perform proper bounds checking when parsing Exif tags. An attacker could possibly use this issue to cause libjxl to crash, resulting in a denial of service. CVE-2023-0645 It was discovered that libjxl did not perform proper bounds checking when decoding...

SUSE SLES15 Security Update : libjxl (SUSE-SU-2025:01883-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:01883-1 advisory. - CVE-2024-11403: Fix out of bounds memory read/write in libjxl bsc1233768. Tenable has extracted the preceding description block directly from the SU...

Security update for libjxl

This update for libjxl fixes the following issues: CVE-2024-11403: Fix out of bounds memory read/write in libjxl bsc1233768. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comman...

SUSE-SU-2025:01883-1 Security update for libjxl

This update for libjxl fixes the following issues: - CVE-2024-11403: Fix out of bounds memory read/write in libjxl bsc1233768...

CVE-2022-34000

libjxl 0.6.1 has an assertion failure in LowMemoryRenderPipeline::Init in renderpipeline/lowmemoryrenderpipeline.cc...

CVE-2021-36691

libjxl v0.5.0 is affected by a Assertion failed issue in lib/jxl/image.cc jxl::PlaneBase::PlaneBase. When encoding a malicous GIF file using cjxl, an attacker can trigger a denial of service...

CVE-2021-45928

libjxl b02d6b9, as used in libvips 8.11 through 8.11.2 and other products, has an out-of-bounds write in jxl::ModularFrameDecoder::DecodeGroup called from jxl::FrameDecoder::ProcessACGroup and jxl::ThreadPool::RunCallStatejxl::FrameDecoder::ProcessSections...

CVE-2021-36692

libjxl v0.3.7 is affected by a Divide By Zero in issue in lib/extras/codecapng.cc jxl::DecodeImageAPNG. When encoding a malicous APNG file using cjxl, an attacker can trigger a denial of service...

openSUSE Security Advisory (openSUSE-SU-2025:0139-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 15 Security Update : libjxl (openSUSE-SU-2025:0139-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:0139-1 advisory. - Update to release 0.8.4 Huffman lookup table size fix CVE-2024-11403 Check height limit in modular trees CVE-2024-11498 Tenable has extracted t...

OPENSUSE-SU-2025:0139-1 Security update for libjxl

This update for libjxl fixes the following issues: - Update to release 0.8.4 Huffman lookup table size fix CVE-2024-11403 Check height limit in modular trees CVE-2024-11498...

Security update for libjxl (moderate)

openSUSE Security Update: Security update for libjxl Announcement ID: openSUSE-SU-2025:0139-1 Rating: moderate References: 1233768 1233785 Cross-References: CVE-2024-11403 CVE-2024-11498 CVSS scores: CVE-2024-11403 SUSE: 6.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L CVE-2024-11498 SUSE: 5.7...

Amazon Linux 2 : thunderbird (ALAS-2025-2830)

The version of thunderbird installed on the remote host is prior to 128.8.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2830 advisory. There exists an out of bounds read/write in LibJXL versions prior to commit 9cc451b91b74ba470fd72bd48c121e9f33d24c99...