libjxl Dezero Error Vulnerability

libjxl is a reference implementation of the JPEG XL image format. libjxl version 0.3.7 of lib/extras/codecapng.cc jxl::DecodeImageAPNG is vulnerable to a dezero error. An attacker can exploit this vulnerability via a malicious APNG file to cause a denial of service...

CVE-2021-36692

CVE-2021-36692 affects the libjxl reference implementation, specifically version 0.3.7 . The vulnerability occurs in the APNG handling path: in lib/extras/codec_apng.cc within the function jxl::DecodeImageAPNG() , where a divide-by-zero error can be triggered when processing a malicious APNG file...