Medium: thunderbird

Issue Overview: There exists an out of bounds read/write in LibJXL versions prior to commit 9cc451b91b74ba470fd72bd48c121e9f33d24c99. The JPEG decoder used by the JPEG XL encoder when doing JPEG recompression i.e. if using JxlEncoderAddJPEGFrame on untrusted input does not properly check bounds i...

Linux Distros Unpatched Vulnerability : CVE-2023-0645

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out of bounds read exists in libjxl. An attacker using a specifically crafted file could cause an out of bounds read in the exif handler. We recommend...

Linux Distros Unpatched Vulnerability : CVE-2024-11498

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is...

Linux Distros Unpatched Vulnerability : CVE-2024-11403

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There exists an out of bounds read/write in LibJXL versions prior to commit 9cc451b91b74ba470fd72bd48c121e9f33d24c99. The JPEG decoder used by the JPEG XL encod...

libjxl:streaming_fuzzer: Heap-buffer-overflow in jxl::WriteTokens

Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=5783612599631872 Project: libjxl Fuzzing Engine: libFuzzer Fuzz Target: streamingfuzzer Job Type: libfuzzerasanlibjxl Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

SUSE CVE-2023-0645

An out of bounds read exists in libjxl. An attacker using a specifically crafted file could cause an out of bounds read in the exif handler. We recommend upgrading to version 0.8.1 or past commit https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159...

SUSE CVE-2024-11403

There exists an out of bounds read/write in LibJXL versions prior to commit 9cc451b91b74ba470fd72bd48c121e9f33d24c99. The JPEG decoder used by the JPEG XL encoder when doing JPEG recompression i.e. if using JxlEncoderAddJPEGFrame on untrusted input does not properly check bounds in the presence o...

SUSE CVE-2024-11498

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...

ROS-20250212-07

Vulnerability of JxlEncoderAddJPEGFrame function of JPEG XL decoder of Libjxl library is related to operation outside of memory buffer boundaries. operation beyond the buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of...

openSUSE Security Advisory (openSUSE-SU-2025:0041-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2025:0041-1 Security update for libjxl

This update for libjxl fixes the following issues: - CVE-2024-11498: Fixed denial of service by checking height limit in modular trees boo1233785...

Security update for libjxl (moderate)

openSUSE Security Update: Security update for libjxl Announcement ID: openSUSE-SU-2025:0041-1 Rating: moderate References: 1233785 Cross-References: CVE-2024-11498 CVSS scores: CVE-2024-11498 SUSE: 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP5 A...

Mageia: Security Advisory (MGASA-2025-0008)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated libjxl packages fix security vulnerabilities

Out of Bounds Memory Read/Write in libjxl. CVE-2024-11403 Resource exhaustion via Stack overflow in libjxl. CVE-2024-11498...

MGASA-2025-0008 Updated libjxl packages fix security vulnerabilities

Out of Bounds Memory Read/Write in libjxl. CVE-2024-11403 Resource exhaustion via Stack overflow in libjxl. CVE-2024-11498...

Security update for mozjs115

This update for mozjs115 fixes the following issues: CVE-2024-11498: Fixed resource exhaustion via Stack overflow in libjxl bsc1233786 CVE-2024-11403: Fixed out of Bounds Memory Read/Write in libjxl bsc1233766 CVE-2024-50602: Fixed DoS via XMLResumeParser in libexpat bsc1232602 Patch Instructions...

The vulnerability of the JxlEncoderAddJPEGFrame() function in the JPEG XL decoder library Libjxl allows a hacker to induce a service failure.

The vulnerability of the JxlEncoderAddJPEGFrame function in the JPEG XL decoder from the Libjxl library is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

libjxl-devel-0.11.1-1.1 on GA media (moderate)

libjxl-devel-0.11.1-1.1 on GA media Announcement ID: openSUSE-SU-2024:14531-1 Rating: moderate Cross-References: CVE-2024-11403 CVE-2024-11498 CVSS scores: CVE-2024-11403 SUSE : 6.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L CVE-2024-11498 SUSE : 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H...

OPENSUSE-SU-2024:14531-1 libjxl-devel-0.11.1-1.1 on GA media

These are all security issues fixed in the libjxl-devel-0.11.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-11498

A flaw was found in the libjxl package. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space, potentially exhausting the stack. This may lead to excessive memory usage, causing a denial of service...