Denial of service

libjxl v0.3.7 is affected by a Divide By Zero in issue in lib/extras/codecapng.cc jxl::DecodeImageAPNG. When encoding a malicous APNG file using cjxl, an attacker can trigger a denial of service...

CVE-2021-36691

CVE-2021-36691 affects libjxl v0.5.0. The issue is an assertion failure in lib/jxl/image.cc jxl::PlaneBase::PlaneBase(), which can be triggered when encoding a malicious GIF file with cjxl, leading to a denial of service. The available connected documents describe the same vulnerability pattern a...