EUVD-2021-32637

Malicious code in bioql PyPI...

CVE-2021-45928

libjxl b02d6b9, as used in libvips 8.11 through 8.11.2 and other products, has an out-of-bounds write in jxl::ModularFrameDecoder::DecodeGroup called from jxl::FrameDecoder::ProcessACGroup and jxl::ThreadPool::RunCallStatejxl::FrameDecoder::ProcessSections...

CVE-2021-45928

libjxl b02d6b9, as used in libvips 8.11 through 8.11.2 and other products, has an out-of-bounds write in jxl::ModularFrameDecoder::DecodeGroup called from jxl::FrameDecoder::ProcessACGroup and jxl::ThreadPool::RunCallStatejxl::FrameDecoder::ProcessSections...

Out-of-bounds

libjxl b02d6b9, as used in libvips 8.11 through 8.11.2 and other products, has an out-of-bounds write in jxl::ModularFrameDecoder::DecodeGroup called from jxl::FrameDecoder::ProcessACGroup and jxl::ThreadPool::RunCallStatejxl::FrameDecoder::ProcessSections...

libvips 缓冲区错误漏洞

libvips is an open source 2D image processing library. A buffer error vulnerability exists in libvips 8.11 through 8.11.2, which stems from an out-of-bounds write in jxl::ModularFrameDecoder::DecodeGroup...

CVE-2021-45928

libjxl b02d6b9, as used in libvips 8.11 through 8.11.2 and other products, has an out-of-bounds write in jxl::ModularFrameDecoder::DecodeGroup called from jxl::FrameDecoder::ProcessACGroup and jxl::ThreadPool::RunCallStatejxl::FrameDecoder::ProcessSections...

CVE-2021-45928

libjxl b02d6b9, as used in libvips 8.11 through 8.11.2 and other products, has an out-of-bounds write in jxl::ModularFrameDecoder::DecodeGroup called from jxl::FrameDecoder::ProcessACGroup and jxl::ThreadPool::RunCallStatejxl::FrameDecoder::ProcessSections...

PT-2021-24318

Name of the Vulnerable Software and Affected Versions: libjxl versions prior to 0.6 libvips versions 8.11 through 8.11.2 Description: The issue is an out-of-bounds write in jxl::ModularFrameDecoder::DecodeGroup, which is called from jxl::FrameDecoder::ProcessACGroup and...

CVE-2021-45928: Out-of-bounds Write

libjxl b02d6b9, as used in libvips 8.11 through 8.11.2 and other products, has an out-of-bounds write in jxl::ModularFrameDecoder::DecodeGroup called from jxl::FrameDecoder::ProcessACGroup and jxl::ThreadPool::RunCallState...

OSV-2021-1644 Container-overflow in void jxl::CopyImageTo<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41608 Crash type: Container-overflow READ 4 Crash state: void jxl::CopyImageTo jxl::ModularFrameDecoder::DecodeGroup jxl::FrameDecoder::ProcessACGroup...

PT-2021-27922

Name of the Vulnerable Software and Affected Versions jxl affected versions not specified Description The issue is related to a crash caused by a container-overflow read. Technical details about the crash include the involvement of the jxl::CopyImageTo function,...

OSV-2021-1615 Heap-buffer-overflow in jxl::ModularFrameDecoder::DecodeGroup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41283 Crash type: Heap-buffer-overflow READ Crash state: jxl::ModularFrameDecoder::DecodeGroup jxl::FrameDecoder::ProcessACGroup jxl::ThreadPool::RunCallStatejxl::FrameDecoder::ProcessSections...

PT-2021-27911

Name of the Vulnerable Software and Affected Versions jxl affected versions not specified Description The issue is related to a heap-buffer-overflow read. Technical details about the crash include the jxl::ModularFrameDecoder::DecodeGroup function, the jxl::FrameDecoder::ProcessACGroup function,...

libvips:jpegsave_buffer_fuzzer: Heap-buffer-overflow in jxl::ModularFrameDecoder::DecodeGroup

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5379396001726464 Project: libvips Fuzzing Engine: afl Fuzz Target: jpegsavebufferfuzzer Job Type: aflasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x620000067f8...

OSV-2021-1606 Segv on unknown address in jxl::N_AVX2::SingleFromSingle

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41233 Crash type: Segv on unknown address Crash state: jxl::NAVX2::SingleFromSingle jxl::ThreadPool::SequentialRunnerStatic jxl::ModularFrameDecoder::ModularImageToDecodedRect...

OSV-2021-1604 Heap-buffer-overflow in jxl::N_AVX2::SingleFromSingle

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41225 Crash type: Heap-buffer-overflow READ Crash state: jxl::NAVX2::SingleFromSingle jxl::ThreadPool::SequentialRunnerStatic jxl::ModularFrameDecoder::ModularImageToDecodedRect...

PT-2021-27908

Name of the Vulnerable Software and Affected Versions jxl affected versions not specified Description The issue is related to a crash caused by a segmentation fault on an unknown address. Technical details about the crash include the involvement of specific functions such as jxl::N...

OSV-2021-1597 UNKNOWN READ in void jxl::CopyImageTo<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41217 Crash type: UNKNOWN READ Crash state: void jxl::CopyImageTo jxl::ModularFrameDecoder::DecodeGroup jxl::FrameDecoder::ProcessACGroup...

PT-2021-27903

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash occurs due to an unknown read issue. The crash involves the jxl::CopyImageTo function, jxl::ModularFrameDecoder::DecodeGroup, and...

OSV-2021-1055 UNKNOWN WRITE in jxl::ModularFrameDecoder::DecodeGroup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36456 Crash type: UNKNOWN WRITE Crash state: jxl::ModularFrameDecoder::DecodeGroup jxl::FrameDecoder::ProcessACGroup jxl::ThreadPool::RunCallStatejxl::FrameDecoder::ProcessSections...