673 matches found
DEBIAN-CVE-2024-11498
There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...
UBUNTU-CVE-2024-11498
There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...
UBUNTU-CVE-2024-11403
There exists an out of bounds read/write in LibJXL versions prior to commit 9cc451b91b74ba470fd72bd48c121e9f33d24c99. The JPEG decoder used by the JPEG XL encoder when doing JPEG recompression i.e. if using JxlEncoderAddJPEGFrame on untrusted input does not properly check bounds in the presence o...
CVE-2024-11498
There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...
CVE-2024-11498 Resource exhaustion via Stack overflow in libjxl
There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...
CVE-2024-11498 Resource exhaustion via Stack overflow in libjxl
There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...
CVE-2024-11498 Resource exhaustion via Stack overflow in libjxl
There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...
CVE-2024-11498
There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...
CVE-2024-11498: Uncontrolled Resource Consumption
There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...
LibJXL security vulnerabilities
LibJXL is a reference implementation of PEG XL encoder and decoder from the LibJXL open source. A security vulnerability exists in LibJXL, which stems from a specially crafted file that can cause the JPEG XL decoder to consume a large amount of stack space, potentially exhausting stack resources...
PT-2024-8851
Name of the Vulnerable Software and Affected Versions libjxl libjxl-devel-0.11.1-1.1 libmozjs-115-0-115.15.0-4.1 libmozjs-128-0-128.5.1-3.1 jpeg-xl affected versions not specified Description A stack buffer overflow exists in the libjxl library's JPEG XL decoder. A specially crafted file can caus...
mpv:fuzzer_protocol_file: Use-of-uninitialized-value in read_distribution_bundle
Project: https://github.com/mpv-player/mpv.git Detailed Report: https://oss-fuzz.com/testcase?key=6022251122589696 Project: mpv Fuzzing Engine: libFuzzer Fuzz Target: fuzzerprotocolfile Job Type: libfuzzermsanmpv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State...
ffmpeg:ffmpeg_dem_IMAGE2_fuzzer: Use-of-uninitialized-value in ff_jpegxl_parse_codestream_header
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5735819170611200 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemIMAGE2fuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
mpv:fuzzer_loadfile_direct: Use-of-uninitialized-value in ff_jpegxl_parse_codestream_header
Project: https://github.com/mpv-player/mpv.git Detailed Report: https://oss-fuzz.com/testcase?key=4697181741711360 Project: mpv Fuzzing Engine: libFuzzer Fuzz Target: fuzzerloadfiledirect Job Type: libfuzzermsanmpv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
ffmpeg:ffmpeg_IO_DEMUXER_fuzzer: Use-of-uninitialized-value in read_distribution_bundle
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5179190066872320 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegIODEMUXERfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
mpv:fuzzer_protocol_lavf: Use-of-uninitialized-value in jxl_u64
Project: https://github.com/mpv-player/mpv.git Detailed Report: https://oss-fuzz.com/testcase?key=4792291689037824 Project: mpv Fuzzing Engine: libFuzzer Fuzz Target: fuzzerprotocollavf Job Type: libfuzzermsanmpv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State...
[SECURITY] Fedora 39 Update: jpegxl-0.8.3-1.fc39
This package contains a reference implementation of JPEG XL encoder and decoder...
HPESBHF04671 rev.2 - Certain HPE ProLiant DL/ML/SY/XL Edgeline and Alletra Servers, Out-of-Bounds Write Vulnerability
Potential Security Impact: Local: Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 4110 - Prior to v2.2005-27-2024 HPE Alletra 4120 - Prior to v2.2005-27-2024 HPE ProLiant DL20 Gen11 - Prior to v1.4803-14-2024 HPE ProLiant DL110 Gen11 - Prior to...
[SECURITY] Fedora 40 Update: jpegxl-0.8.3-1.fc40
This package contains a reference implementation of JPEG XL encoder and decoder...
mpv:fuzzer_protocol_file: Use-of-uninitialized-value in jxl_u64
Project: https://github.com/mpv-player/mpv.git Detailed Report: https://oss-fuzz.com/testcase?key=6416940952780800 Project: mpv Fuzzing Engine: libFuzzer Fuzz Target: fuzzerprotocolfile Job Type: libfuzzermsanmpv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State...