Lucene search
K

15 matches found

AstraLinux
AstraLinux
added 2025/11/01 10:54 a.m.2 views

Astra Linux - уязвимость в jpeg-xl

There exists an out of bounds read/write in LibJXL versions prior to commit 9cc451b91b74ba470fd72bd48c121e9f33d24c99. The JPEG decoder used by the JPEG XL encoder when doing JPEG recompression i.e. if using JxlEncoderAddJPEGFrame on untrusted input does not properly check bounds in the presence o...

9.8CVSS7.1AI score0.00082EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-33831

Malicious code in bioql PyPI...

7.5CVSS5.5AI score0.00051EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2025/08/07 12:0 a.m.1 views

The vulnerability of the JPEG XL decoder in the Libjxl library, allowing attackers to trigger a service denial

The vulnerability of the JPEG XL decoder in the Libjxl library is related to an uncontrolled resource consumption due to buffer overflow on the stack. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

6.3CVSS6.9AI score0.00082EPSS
Exploits0References7Affected Software4
Redos
Redos
added 2025/02/13 12:0 a.m.4 views

ROS-20250212-07

Vulnerability of JxlEncoderAddJPEGFrame function of JPEG XL decoder of Libjxl library is related to operation outside of memory buffer boundaries. operation beyond the buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of...

9.8CVSS7AI score0.00082EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2024/11/25 8:54 p.m.9 views

CVE-2024-11498

A flaw was found in the libjxl package. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space, potentially exhausting the stack. This may lead to excessive memory usage, causing a denial of service...

5.3CVSS6.5AI score0.00051EPSS
Exploits0References4
OSV
OSV
added 2024/11/25 2:15 p.m.2 views

DEBIAN-CVE-2024-11498

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...

7.5CVSS6.6AI score0.00051EPSS
Exploits0References1
NVD
NVD
added 2024/11/25 2:15 p.m.21 views

CVE-2024-11498

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...

7.5CVSS0.00051EPSS
Exploits0References1
OSV
OSV
added 2024/11/25 2:15 p.m.10 views

CVE-2024-11498

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...

7.5CVSS7AI score
Exploits0References1
OSV
OSV
added 2024/11/25 2:15 p.m.3 views

UBUNTU-CVE-2024-11498

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...

7.5CVSS6AI score0.00051EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/11/25 1:8 p.m.18 views

CVE-2024-11498 Resource exhaustion via Stack overflow in libjxl

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...

6.9CVSS7.3AI score0.00051EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/25 1:8 p.m.22 views

CVE-2024-11498 Resource exhaustion via Stack overflow in libjxl

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...

6.9CVSS0.00051EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/25 12:0 a.m.3 views

LibJXL 安全漏洞

LibJXL is a reference implementation of PEG XL encoder and decoder from the LibJXL open source. A security vulnerability exists in LibJXL, which stems from a specially crafted file that can cause the JPEG XL decoder to consume a large amount of stack space, potentially exhausting stack resources...

7.5CVSS5.3AI score0.00051EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/10/03 12:0 a.m.2 views

PT-2024-8851

Name of the Vulnerable Software and Affected Versions libjxl libjxl-devel-0.11.1-1.1 libmozjs-115-0-115.15.0-4.1 libmozjs-128-0-128.5.1-3.1 jpeg-xl affected versions not specified Description A stack buffer overflow exists in the libjxl library's JPEG XL decoder. A specially crafted file can caus...

9.8CVSS7AI score0.00172EPSS
Exploits0References56
BDU FSTEC
BDU FSTEC
added 2024/01/31 12:0 a.m.2 views

The vulnerability of the jpegxl_anim_read_packet() function in the JPEG XL decoder allows a hacker to execute arbitrary code.

The vulnerability of the jpegxlanimreadpacket function in the JPEG XL decoder, a multimedia library from FFmpeg, is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

7.5CVSS8.3AI score0.02806EPSS
Exploits0References8Affected Software1
Positive Technologies
Positive Technologies
added 2023/09/07 12:0 a.m.3 views

PT-2023-8456 · FFmpeg · Ffmpeg

Name of the Vulnerable Software and Affected Versions: FFmpeg versions prior to 6.1 Description: The issue is related to an integer overflow vulnerability in the JPEG XL decoder of the FFmpeg multimedia library. This vulnerability can be exploited by a remote attacker to execute arbitrary code...

9.8CVSS9.6AI score0.01875EPSS
Exploits0References18
Rows per page
Query Builder