EUVD-2021-14744

Malware in sbrugna...

CVE-2021-28026

jpeg-xl v0.3.2 is affected by a heap buffer overflow in /lib/jxl/coefforder.cc ReadPermutation. When decoding a malicous jxl file using djxl, an attacker can trigger arbitrary code execution or a denial of service...

The vulnerability of the jxl::FindExifTagPosition function in the JPEG XL codec, which allows a hacker to cause a service failure.

The vulnerability of the jxl::FindExifTagPosition function in the JPEG XL codec is related to the execution of operations outside of the buffer’s boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...