Libjxl vulnerabilities
We track 3 vulnerabilities in Libjxl products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 25, 2024.
Latest Libjxl vulnerabilities
- 7.5 High severity
libjxl: Uncontrolled Resource Consumption
There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to 256mb is possible, maybe 512mb), potentially exhausting the stack. An attacker can craft a file that will cause
- 9.8 Critical severity
libjxl: Out-of-bounds Read
There exists an out of bounds read/write in LibJXL versions prior to commit 9cc451b91b74ba470fd72bd48c121e9f33d24c99. The JPEG decoder used by the JPEG XL encoder when doing JPEG recompression (i.e. if using JxlEncoderAddJPEGFrame on untrusted input) does not
- 9.1 Critical severity
Libjxl: Out-of-bounds Read
An out of bounds read exists in libjxl. An attacker using a specifically crafted file could cause an out of bounds read in the exif handler. We recommend upgrading to version 0.8.1 or past commit https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a