CVE-2021-45928

libjxl b02d6b9, as used in libvips 8.11 through 8.11.2 and other products, has an out-of-bounds write in jxl::ModularFrameDecoder::DecodeGroup called from jxl::FrameDecoder::ProcessACGroup and jxl::ThreadPool::RunCallStatejxl::FrameDecoder::ProcessSections...

Out-of-bounds

libjxl b02d6b9, as used in libvips 8.11 through 8.11.2 and other products, has an out-of-bounds write in jxl::ModularFrameDecoder::DecodeGroup called from jxl::FrameDecoder::ProcessACGroup and jxl::ThreadPool::RunCallStatejxl::FrameDecoder::ProcessSections...

PT-2021-27978

Name of the Vulnerable Software and Affected Versions jxl affected versions not specified Description A heap-buffer-overflow issue was identified, which can cause a crash. The crash occurs in the jxl::N AVX2::FloatToRGBA8 function, specifically when jxl::FinalizeImageRect and...

OSV-2021-1615 Heap-buffer-overflow in jxl::ModularFrameDecoder::DecodeGroup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41283 Crash type: Heap-buffer-overflow READ Crash state: jxl::ModularFrameDecoder::DecodeGroup jxl::FrameDecoder::ProcessACGroup jxl::ThreadPool::RunCallStatejxl::FrameDecoder::ProcessSections...

OSV-2021-1011 Use-of-uninitialized-value in jxl::N_AVX2::AddNoise

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36158 Crash type: Use-of-uninitialized-value Crash state: jxl::NAVX2::AddNoise jxl::FinalizeImageRect jxl::ThreadPool::RunCallStatejxl::FinalizeFrameDecoding...

PT-2021-27659

Name of the Vulnerable Software and Affected Versions: jxl affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. Technical details about the crash include the involvement of specific functions such as jxl::N AVX2::AddNoise,...

OSV-2021-916 Use-of-uninitialized-value in jxl::ModularFrameDecoder::DecodeAcMetadata

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35778 Crash type: Use-of-uninitialized-value Crash state: jxl::ModularFrameDecoder::DecodeAcMetadata jxl::FrameDecoder::ProcessDCGroup jxl::ThreadPool::RunCallStatejxl::Status...

OSV-2021-861 Use-of-uninitialized-value in jxl::N_AVX2::FloatToRGBA8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35231 Crash type: Use-of-uninitialized-value Crash state: jxl::NAVX2::FloatToRGBA8 jxl::FinalizeImageRect jxl::ThreadPool::RunCallStatejxl::FinalizeFrameDecoding...

PT-2021-28307

Name of the Vulnerable Software and Affected Versions: jxl affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. Technical details about the crash include the involvement of specific functions such as jxl::N AVX2::FloatToRGBA8,...

OSV-2021-853 Heap-buffer-overflow in jxl::ThreadPool::RunCallState<jxl::ConvertToExternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35172 Crash type: Heap-buffer-overflow WRITE 4 Crash state: jxl::ThreadPool::RunCallStatejxl::ConvertToExternal jpegxl::ThreadParallelRunner::ThreadFunc void std::1::threadproxystd::1::tuplestd::1::uniqueptrstd::1::...

PT-2021-28302

Name of the Vulnerable Software and Affected Versions: jxl affected versions not specified Description: A heap buffer overflow issue has been identified, which can cause a crash. The crash occurs due to a heap-buffer-overflow WRITE 4 error. Technical details about the issue include the involvemen...