346 matches found
CVE-2021-22563
Invalid JPEG XL images using libjxl can cause an out of bounds access on a std::vector when rendering splines. The OOB read access can either lead to a segfault, or rendering splines based on other process memory. It is recommended to upgrade past 0.6.0 or patch with...
CVE-2021-22563
Invalid JPEG XL images using libjxl can cause an out of bounds access on a std::vector when rendering splines. The OOB read access can either lead to a segfault, or rendering splines based on other process memory. It is recommended to upgrade past 0.6.0 or patch with...
Design/Logic Flaw
Invalid JPEG XL images using libjxl can cause an out of bounds access on a std::vector when rendering splines. The OOB read access can either lead to a segfault, or rendering splines based on other process memory. It is recommended to upgrade past 0.6.0 or patch with...
CVE-2021-22564
For certain valid JPEG XL images with a size slightly larger than an integer number of groups 256x256 pixels when processing the groups out of order the decoder can perform an out of bounds copy of image pixels from an image buffer in the heap to another. This copy can occur when processing the...
CVE-2021-22564 Out of bounds Copy in Libjxl in large image groups
For certain valid JPEG XL images with a size slightly larger than an integer number of groups 256x256 pixels when processing the groups out of order the decoder can perform an out of bounds copy of image pixels from an image buffer in the heap to another. This copy can occur when processing the...
CVE-2021-22564
The CVE-2021-22564 issue affects the libjxl JPEG XL decoder. It describes an out-of-bounds copy of image pixels from a heap buffer when processing image groups out of order (edges of images like right or bottom). The vulnerability can occur in multi‑threaded decoding environments where groups are...
CVE-2021-22563 Memory Overread in libjxl
Invalid JPEG XL images using libjxl can cause an out of bounds access on a std::vector when rendering splines. The OOB read access can either lead to a segfault, or rendering splines based on other process memory. It is recommended to upgrade past 0.6.0 or patch with...
CVE-2021-22563
Invalid JPEG XL images using libjxl can cause an out of bounds access on a std::vector when rendering splines. The OOB read access can either lead to a segfault, or rendering splines based on other process memory. It is recommended to upgrade past 0.6.0 or patch with...
CVE-2021-22563
The CVE-2021-22563 entry concerns invalid JPEG XL images processed by libjxl causing an out-of-bounds read on a std::vector<std::vector> during spline rendering. This can yield a segfault or render splines based on memory from other processes. Affected component is libjxl’s image decoding p...
PT-2021-15143
Name of the Vulnerable Software and Affected Versions libjxl versions prior to 0.6.0 Description The issue arises when processing certain valid JPEG XL images with a size slightly larger than an integer number of groups 256x256 pixels out of order. This can lead to an out of bounds copy of image...
PT-2021-15142
Name of the Vulnerable Software and Affected Versions libjxl versions prior to 0.6.0 Description The issue arises from invalid JPEG XL images that can cause an out of bounds access on a std::vector when rendering splines using libjxl. This out of bounds read access can lead to a segfault or resul...
CVE-2021-22564: Heap-based Buffer Overflow
For certain valid JPEG XL images with a size slightly larger than an integer number of groups 256x256 pixels when processing the groups out of order the decoder can perform an out of bounds copy of image pixels from an image buffer in the heap to another. This copy can occur when processing the...
CVE-2021-22563: Buffer Over-read
Invalid JPEG XL images using libjxl can cause an out of bounds access on a std::vector when rendering splines. The OOB read access can either lead to a segfault, or rendering splines based on other process memory. It is recommended to upgrade past 0.6.0 or patch with...
Github libjxl 缓冲区错误漏洞
Github libjxl is a reference implementation of PEG XL encoder and decoder. A security vulnerability exists in libjxl that stems from the fact that invalid JPEG XL images using libjxl may result in out-of-bounds access to std::vector when rendering samples.OOB read accesses may result in...
libjxl:djxl_fuzzer: Heap-buffer-overflow in WriteRingBuffer
Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=6677658197426176 Project: libjxl Fuzzing Engine: libFuzzer Fuzz Target: djxlfuzzer Job Type: libfuzzerasanlibjxl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x6060000001e1...
libjxl:djxl_fuzzer: Heap-buffer-overflow in jxl::JxlBoxContentDecoder::Process
Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=4894980951375872 Project: libjxl Fuzzing Engine: libFuzzer Fuzz Target: djxlfuzzer Job Type: libfuzzerasanlibjxl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x6060000001...
CVE-2021-22563
Invalid JPEG XL images using libjxl can cause an out of bounds access on a std::vector when rendering splines. The OOB read access can either lead to a segfault, or rendering splines based on other process memory. It is recommended to upgrade past 0.6.0 or patch with...
libjxl Assertion Failure Vulnerability
libjxl is a reference implementation of the JPEG XL image format. libjxl version 0.5.0 contains an assertion failure vulnerability in lib/jxl/image.cc jxl::PlaneBase::PlaneBase. An attacker can exploit the vulnerability to cause a denial of service via a malicious GIF file...
libjxl Dezero Error Vulnerability
libjxl is a reference implementation of the JPEG XL image format. libjxl version 0.3.7 of lib/extras/codecapng.cc jxl::DecodeImageAPNG is vulnerable to a dezero error. An attacker can exploit this vulnerability via a malicious APNG file to cause a denial of service...