CVE-2021-27804

CVE-2021-27804 involves the JPEG XL project (jpeg-xl) with versions up to 0.3.2, where writable memory corruption is reported. The provided documents identify the affected software and the memory-corruption impact but do not disclose a detailed root cause in those entries. The interconnected Red ...

CVE-2026-1837

The connected records confirm CVE-2026-1837 affects libjxl’s decoder when LCMS2 is used as the CMS. A specially-crafted file can trigger an out-of-bounds write by transforming grayscale images to another grayscale color space, where buffers allocated for 1-float-per-pixel are treated as 3-float-p...

CVE-2022-34000

CVE-2022-34000 affects the JPEG XL reference implementation libjxl 0.6.1, with an assertion failure in LowMemoryRenderPipeline::Init() located in render_pipeline/low_memory_render_pipeline.cc. The issue is described as a potential denial of service against the libjxl process when processing craft...

CVE-2024-11498

CVE-2024-11498 affects the libjxl (JPEG XL) library. A crafted file can trigger a stack-based overflow, causing the decoder to allocate large stack space (up to 256–512 MB) and potentially exhaust stack memory, leading to denial of service. Multiple advisories and deployable updates reference thi...

CVE-2023-0645

CVE-2023-0645 concerns the libjxl (JPEG XL) library. The connected documents corroborate a vulnerability where an out-of-bounds read can be triggered by a crafted file in the exif handling code, potentially allowing a crash or denial-of-service. Additional CVEs in the same family describe related...

CVE-2024-11403

CVE-2024-11403 involves an out-of-bounds read/write in LibJXL’s JPEG decoder used for recompression (JxlEncoderAddJPEGFrame) and also affects jpegli. The vulnerability arises when processing incomplete codes, allowing out-of-bounds writes and potentially causing reads of uninitialized memory or f...

CVE-2025-12474

The CVE describes a vulnerability in libjxl where a specially crafted file can cause the decoder to read pixel data from uninitialized memory, due to referencing an outside-image-bound area in later patches and an optimization that omits populating those areas. Several connected advisories confir...

CVE-2023-35790

CVE-2023-35790 affects the JPEG XL library (libjxl); a vulnerability in the patch decoding code allows an integer underflow that can cause a denial of service, including infinite loops. Public entries from Debian/Ubuntu indicate impacted releases and that fixes are available; Debian notes the iss...

CVE-2021-36691

CVE-2021-36691 affects libjxl v0.5.0. The issue is an assertion failure in lib/jxl/image.cc jxl::PlaneBase::PlaneBase(), which can be triggered when encoding a malicious GIF file with cjxl, leading to a denial of service. The available connected documents describe the same vulnerability pattern a...

CVE-2021-36692

CVE-2021-36692 affects the libjxl reference implementation, specifically version 0.3.7 . The vulnerability occurs in the APNG handling path: in lib/extras/codec_apng.cc within the function jxl::DecodeImageAPNG() , where a divide-by-zero error can be triggered when processing a malicious APNG file...

CVE-2021-45928

CVE-2021-45928 affects libjxl as used in libvips 8.11–8.11.2, with an out-of-bounds write in jxl::ModularFrameDecoder::DecodeGroup (called from jxl::FrameDecoder::ProcessACGroup and jxl::ThreadPool::RunCallStatejxl::FrameDecoder::ProcessSections ). The vulnerability is caused by an out-of-bounds ...

CVE-2021-22564

The CVE-2021-22564 issue affects the libjxl JPEG XL decoder. It describes an out-of-bounds copy of image pixels from a heap buffer when processing image groups out of order (edges of images like right or bottom). The vulnerability can occur in multi‑threaded decoding environments where groups are...

CVE-2021-22563

The CVE-2021-22563 entry concerns invalid JPEG XL images processed by libjxl causing an out-of-bounds read on a std::vector<std::vector> during spline rendering. This can yield a segfault or render splines based on memory from other processes. Affected component is libjxl’s image decoding p...