CVE-2024-11403: Out-of-bounds Write

There exists an out of bounds read/write in LibJXL versions prior to commit 9cc451b91b74ba470fd72bd48c121e9f33d24c99. The JPEG decoder used by the JPEG XL encoder when doing JPEG recompression i.e. if using JxlEncoderAddJPEGFrame on untrusted input does not properly check bounds in the presence o...

CVE-2024-11498: Uncontrolled Resource Consumption

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...

LibJXL 安全漏洞

LibJXL is a reference implementation of PEG XL encoder and decoder in the LibJXL open source. A security vulnerability exists in LibJXL that stems from improper boundary checking by the JPEG decoder when handling JPEG recompression, which could lead to out-of-bounds writes in the event that...

PT-2024-9202

Name of the Vulnerable Software and Affected Versions LibJXL versions prior to commit 9cc451b91b74ba470fd72bd48c121e9f33d24c99 libjpeg affected versions not specified libmozjs-115-0-115.15.0-4.1 libmozjs-128-0-128.5.1-3.1 libjxl-devel-0.11.1-1.1 qt6-webengine Description An out-of-bounds read/wri...

PT-2024-8851

Name of the Vulnerable Software and Affected Versions libjxl libjxl-devel-0.11.1-1.1 libmozjs-115-0-115.15.0-4.1 libmozjs-128-0-128.5.1-3.1 jpeg-xl affected versions not specified Description A stack buffer overflow exists in the libjxl library's JPEG XL decoder. A specially crafted file can caus...

libjxl:transforms_fuzzer: Heap-buffer-overflow in FillChannel

Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=5691029479555072 Project: libjxl Fuzzing Engine: libFuzzer Fuzz Target: transformsfuzzer Job Type: libfuzzerasani386libjxl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

openSUSE: Security Advisory for libjxl (openSUSE-SU-2023:0161-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libjxl:icc_codec_fuzzer: Heap-buffer-overflow in jxl::PredictICC

Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=5493844342800384 Project: libjxl Fuzzing Engine: libFuzzer Fuzz Target: icccodecfuzzer Job Type: libfuzzerasani386libjxl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libjxl:djxl_fuzzer: Global-buffer-overflow in void jxl::N_AVX2::WriteToOutputStage::StoreUnsignedRow<unsigned char>

Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=5989119444451328 Project: libjxl Fuzzing Engine: libFuzzer Fuzz Target: djxlfuzzer Job Type: libfuzzerasanlibjxl Platform Id: linux Crash Type: Global-buffer-overflow READ 16 Crash Address:...

libjxl:icc_codec_fuzzer: Heap-buffer-overflow in jxl::UnpredictICC

Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=5245784085823488 Project: libjxl Fuzzing Engine: libFuzzer Fuzz Target: icccodecfuzzer Job Type: libfuzzerasani386libjxl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

OPENSUSE-SU-2023:0161-1 Security update for libjxl

This update for libjxl fixes the following issues: Update to release 0.8.2 CVE-2023-35790: Fix an integer underflow bug in patch decoding. bsc1212492...

Security update for libjxl (moderate)

openSUSE Security Update: Security update for libjxl Announcement ID: openSUSE-SU-2023:0161-1 Rating: moderate References: 1212492 Cross-References: CVE-2023-35790 CVSS scores: CVE-2023-35790 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP5 A...

ROS-20230627-02

Libjxl library vulnerability is related to a bug in decpatchdictionary.cc. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

SUSE CVE-2023-35790

An issue was discovered in decpatchdictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, such as an infinite loop...

CVE-2023-35790

An issue was discovered in decpatchdictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, such as an infinite loop...

CVE-2023-35790

An issue was discovered in decpatchdictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, such as an infinite loop...

DEBIAN-CVE-2023-35790

An issue was discovered in decpatchdictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, such as an infinite loop...

CVE-2023-35790

An issue was discovered in decpatchdictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, such as an infinite loop...

Integer overflow

An issue was discovered in decpatchdictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, such as an infinite loop...

PT-2023-3326 · Libjxl +5 · Libjxl +5

Name of the Vulnerable Software and Affected Versions: libjxl versions prior to 0.8.2 Description: An issue in dec patch dictionary.cc can lead to a denial of service due to an integer underflow in patch decoding, potentially causing an infinite loop. The issue can be exploited by a remote attack...