PT-2023-16422

Name of the Vulnerable Software and Affected Versions libjxl versions prior to 0.8.1 Description An out of bounds read exists in libjxl. An attacker using a specifically crafted file could cause an out of bounds read in the exif handler. Recommendations For versions prior to 0.8.1, we recommend...

libjxl: Denial of Service

Background libjxl is the JPEG XL image format reference implementation. Description libjxl contains an unecessary assertion in jxl::LowMemoryRenderPipeline::Init. Impact An attacker can cause a denial of service of the libjxl process via a crafted input file. Workaround There is no known workarou...

GLSA-202210-36 : libjxl: Denial of Service

The remote host is affected by the vulnerability described in GLSA-202210-36 libjxl: Denial of Service - libjxl 0.6.1 has an assertion failure in LowMemoryRenderPipeline::Init in renderpipeline/lowmemoryrenderpipeline.cc. CVE-2022-34000 Note that Nessus has not tested for this issue but has inste...

libjxl:djxl_fuzzer: Heap-buffer-overflow in jxl::N_AVX2::BlendingStage::ProcessPaddingRow

Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=5694394270875648 Project: libjxl Fuzzing Engine: honggfuzz Fuzz Target: djxlfuzzer Job Type: honggfuzzasanlibjxl Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x620000051000...

libjxl:djxl_fuzzer: Heap-buffer-overflow in jxl::PerformBlending

Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=6045879093559296 Project: libjxl Fuzzing Engine: libFuzzer Fuzz Target: djxlfuzzer Job Type: libfuzzerasanlibjxl Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7f259d56e60...

libjxl:djxl_fuzzer: Heap-buffer-overflow in jxl::N_EMU128::WriteToU8Stage::ProcessRow

Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=5631090022285312 Project: libjxl Fuzzing Engine: libFuzzer Fuzz Target: djxlfuzzer Job Type: libfuzzerasanlibjxl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x6280000039...

libjxl:djxl_fuzzer: Heap-use-after-free in jxl::WriteToPixelCallbackStage::ProcessRow

Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=6213186918940672 Project: libjxl Fuzzing Engine: libFuzzer Fuzz Target: djxlfuzzer Job Type: libfuzzerasanlibjxl Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x61e000026100...

libjxl:djxl_fuzzer: Heap-buffer-overflow in jxl::N_AVX2::BlendingStage::ProcessPaddingRow

Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=6444482282782720 Project: libjxl Fuzzing Engine: libFuzzer Fuzz Target: djxlfuzzer Job Type: libfuzzerasanlibjxl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x626000009000...

CVE-2022-34000

libjxl 0.6.1 has an assertion failure in LowMemoryRenderPipeline::Init in renderpipeline/lowmemoryrenderpipeline.cc...

CVE-2022-34000

libjxl 0.6.1 has an assertion failure in LowMemoryRenderPipeline::Init in renderpipeline/lowmemoryrenderpipeline.cc...

libjxl:djxl_fuzzer: Heap-buffer-overflow in jxl::BitsCoder::Read

Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=5900921718046720 Project: libjxl Fuzzing Engine: libFuzzer Fuzz Target: djxlfuzzer Job Type: libfuzzerasanlibjxl Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6080000000f...

PT-2022-21960 · Libjxl · Libjxl

Name of the Vulnerable Software and Affected Versions: libjxl version 0.6.1 Description: The issue is related to an assertion failure in the LowMemoryRenderPipeline::Init function, located in the render pipeline/low memory render pipeline.cc file. No information is provided about the estimated...

CVE-2022-34000

CVE-2022-34000 affects the JPEG XL reference implementation libjxl 0.6.1, with an assertion failure in LowMemoryRenderPipeline::Init() located in render_pipeline/low_memory_render_pipeline.cc. The issue is described as a potential denial of service against the libjxl process when processing craft...

CVE-2022-34000

libjxl 0.6.1 has an assertion failure in LowMemoryRenderPipeline::Init in renderpipeline/lowmemoryrenderpipeline.cc...

CVE-2022-34000: Reachable Assertion

libjxl 0.6.1 has an assertion failure in LowMemoryRenderPipeline::Init in renderpipeline/lowmemoryrenderpipeline.cc...

libjxl 安全漏洞

libjxl is a reference implementation of PEG XL encoder and decoder. A security vulnerability exists in libjxl version 0.6.1, which stems from an assertion failure in LowMemoryRenderPipeline::Init in renderpipeline/lowmemoryrenderpipeline.cc...

CVE-2022-34000

libjxl 0.6.1 has an assertion failure in LowMemoryRenderPipeline::Init in renderpipeline/lowmemoryrenderpipeline.cc...

CVE-2022-34000

libjxl 0.6.1 has an assertion failure in LowMemoryRenderPipeline::Init in renderpipeline/lowmemoryrenderpipeline.cc...

CVE-2022-34000

libjxl 0.6.1 has an assertion failure in LowMemoryRenderPipeline::Init in renderpipeline/lowmemoryrenderpipeline.cc...

libjxl:djxl_fuzzer: Heap-buffer-overflow in jxl::JxlBoxContentDecoder::Process

Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=5392074930782208 Project: libjxl Fuzzing Engine: libFuzzer Fuzz Target: djxlfuzzer Job Type: libfuzzerasanlibjxl Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6060000000bd...