CVE-2021-28026

CVE-2021-28026 affects jpeg-xl v0.3.2; a heap buffer overflow in /lib/jxl/coeff_order.cc ReadPermutation can be triggered when decoding a malicious JXL file with djxl, enabling arbitrary code execution or a denial of service. The connected sources corroborate the vulnerability; no patch/version r...

CVE-2021-28026

jpeg-xl v0.3.2 is affected by a heap buffer overflow in /lib/jxl/coefforder.cc ReadPermutation. When decoding a malicous jxl file using djxl, an attacker can trigger arbitrary code execution or a denial of service...

OESA-2021-1061 openjpeg security update

Security Fixes: Heap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1.5.2 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file because of incorrect j2kdecode, j2kreadeoc, and tcddecodetile...

CVE-2021-28026: Out-of-bounds Write

jpeg-xl v0.3.2 is affected by a heap buffer overflow in /lib/jxl/coefforder.cc ReadPermutation. When decoding a malicous jxl file using djxl, an attacker can trigger arbitrary code execution or a denial of service...

jpeg-xl 缓冲区错误漏洞

JPEG aka jpeg-xl is JPEG open source an application. Provides image delivery on the Web and professional photography needs. jpeg-xl v0.3.2 suffers from a buffer error vulnerability that originates from a heap buffer overflow. An attacker could exploit this vulnerability to trigger arbitrary code...

PT-2021-17714

Name of the Vulnerable Software and Affected Versions: jpeg-xl version 0.3.2 Description: The issue is related to a heap buffer overflow in the /lib/jxl/coeff order.cc file, specifically in the ReadPermutation function. This can be triggered when decoding a malicious jxl file using djxl,...

FreeBSD : jasper -- multiple vulnerabilities (3a469cbc-7a66-11eb-bd3f-08002728f74c)

JasPer Releases : - Fix memory-related bugs in the JPEG-2000 codec resulting from attempting to decode invalid code streams. 264, 265 This fix is associated with CVE-2021-26926 and CVE-2021-26927. - Fix wrong return value under some compilers 260 - Fix CVE-2021-3272 heap buffer overflow in...

jpeg-xl 0.3.1 Memory Corruption Vulnerability

Multiple Vulnerabilities in jpeg-xl =================================== CVE: CVE-2021-27804 Highest Severity Rating: High Confirmed Affected Versions: jpeg-xl v0.3.1 and earlier Vendor: Joint Photographic Experts Group JPEG Vendor URL: https://gitlab.com/wg1/jpeg-xl Summary and Impact...

CVE-2021-27804

JPEG XL aka jpeg-xl through 0.3.2 allows writable memory corruption...

CVE-2021-27804

JPEG XL aka jpeg-xl through 0.3.2 allows writable memory corruption...

CVE-2021-27804

JPEG XL aka jpeg-xl through 0.3.2 allows writable memory corruption...

Memory corruption

JPEG XL aka jpeg-xl through 0.3.2 allows writable memory corruption...

CVE-2021-27804

JPEG XL aka jpeg-xl through 0.3.2 allows writable memory corruption...

CVE-2021-27804

CVE-2021-27804 involves the JPEG XL project (jpeg-xl) with versions up to 0.3.2, where writable memory corruption is reported. The provided documents identify the affected software and the memory-corruption impact but do not disclose a detailed root cause in those entries. The interconnected Red ...

CVE-2021-27804

JPEG XL aka jpeg-xl through 0.3.2 allows writable memory corruption...

CVE-2021-27804: Out-of-bounds Write

JPEG XL aka jpeg-xl through 0.3.2 allows writable memory corruption...

MediaTek jpeg Buffer Overflow Vulnerability

MediaTek jpeg is an application chip from MediaTek China. It provides optimized image processing. MediaTek jpeg suffers from a buffer overflow vulnerability that originates from incorrect input validation and can be exploited by an attacker to write out-of-bounds...

PT-2021-17626

Name of the Vulnerable Software and Affected Versions: jpeg-xl versions through 0.3.2 Description: The issue allows for writable memory corruption. Recommendations: For versions through 0.3.2, update to a version later than 0.3.2 to resolve the issue...

MGASA-2021-0090 Updated pix packages fix a security vulnerability

A heap-based buffer overflow in cairoimagesurfacecreatefromjpeg in extensions/cairoio/cairo-image-surface-jpeg.c in Linux Mint Pix before 2.4.5 allows attackers to cause a crash and potentially execute arbitrary code via a crafted JPEG file CVE-2019-20326...

Updated pix packages fix a security vulnerability

A heap-based buffer overflow in cairoimagesurfacecreatefromjpeg in extensions/cairoio/cairo-image-surface-jpeg.c in Linux Mint Pix before 2.4.5 allows attackers to cause a crash and potentially execute arbitrary code via a crafted JPEG file CVE-2019-20326...