6 matches found
OSV-2022-836 Heap-buffer-overflow in jxl::N_AVX2::BlendingStage::ProcessPaddingRow
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50915 Crash type: Heap-buffer-overflow READ Crash state: jxl::NAVX2::BlendingStage::ProcessPaddingRow jxl::LowMemoryRenderPipeline::RenderPadding jxl::LowMemoryRenderPipeline::ProcessBuffers...
OSV-2022-264 Heap-buffer-overflow in jxl::N_AVX2::BlendingStage::ProcessRow
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45822 Crash type: Heap-buffer-overflow READ 4 Crash state: jxl::NAVX2::BlendingStage::ProcessRow jxl::LowMemoryRenderPipeline::RenderRect jxl::LowMemoryRenderPipeline::ProcessBuffers...
OSV-2021-1748 Heap-buffer-overflow in jxl::N_AVX2::FloatToRGBA8
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42839 Crash type: Heap-buffer-overflow WRITE 1 Crash state: jxl::NAVX2::FloatToRGBA8 jxl::FinalizeImageRect jxl::ThreadPool::RunCallStatejxl::FinalizeFrameDecoding...
OSV-2021-1606 Segv on unknown address in jxl::N_AVX2::SingleFromSingle
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41233 Crash type: Segv on unknown address Crash state: jxl::NAVX2::SingleFromSingle jxl::ThreadPool::SequentialRunnerStatic jxl::ModularFrameDecoder::ModularImageToDecodedRect...
OSV-2021-1604 Heap-buffer-overflow in jxl::N_AVX2::SingleFromSingle
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41225 Crash type: Heap-buffer-overflow READ Crash state: jxl::NAVX2::SingleFromSingle jxl::ThreadPool::SequentialRunnerStatic jxl::ModularFrameDecoder::ModularImageToDecodedRect...
OSV-2021-861 Use-of-uninitialized-value in jxl::N_AVX2::FloatToRGBA8
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35231 Crash type: Use-of-uninitialized-value Crash state: jxl::NAVX2::FloatToRGBA8 jxl::FinalizeImageRect jxl::ThreadPool::RunCallStatejxl::FinalizeFrameDecoding...