PT-2021-27671

Name of the Vulnerable Software and Affected Versions: jxl affected versions not specified Description: The issue is related to a crash in the jxl library, specifically in the ModularFrameDecoder and FrameDecoder components. The crash occurs when decoding a group and processing an AC group...

libvips:jpegsave_buffer_fuzzer: Crash in jxl::ModularFrameDecoder::DecodeGroup

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5454144264601600 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: jpegsavebufferfuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00000000100...

OSV-2021-916 Use-of-uninitialized-value in jxl::ModularFrameDecoder::DecodeAcMetadata

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35778 Crash type: Use-of-uninitialized-value Crash state: jxl::ModularFrameDecoder::DecodeAcMetadata jxl::FrameDecoder::ProcessDCGroup jxl::ThreadPool::RunCallStatejxl::Status...

PT-2021-28330

Name of the Vulnerable Software and Affected Versions: jxl affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the jxl::ModularFrameDecoder::DecodeAcMetadata function, which is called by...