Vulnerability index

Browse CVEs

11 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Libjxl HIGH 7.5
CVE-2026-1837

A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after that data from another uninit…

Fix: after 0.11.1
Fix from $1,950 2026-02-11
Libjxl CRITICAL 9.8
CVE-2024-11403

There exists an out of bounds read/write in LibJXL versions prior to commit 9cc451b91b74ba470fd72bd48c121e9f33d24c99. The JPEG decoder used by the JP…

Fix: 0.8.4+
Fix from $2,300 2024-11-25
Libjxl HIGH 7.5
CVE-2024-11498

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to …

Fix: 0.8.4+
Fix from $1,950 2024-11-25
Libjxl HIGH 7.5
CVE-2023-35790

An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, su…

Fix: 0.8.2+
Fix from $1,950 2023-06-16
Libjxl CRITICAL 9.1
CVE-2023-0645

An out of bounds read exists in libjxl. An attacker using a specifically crafted file could cause an out of bounds read in the exif handler. We recom…

Fix: 0.8.1+
Fix from $2,300 2023-04-11
Libjxl MEDIUM 6.5
CVE-2022-34000

libjxl 0.6.1 has an assertion failure in LowMemoryRenderPipeline::Init() in render_pipeline/low_memory_render_pipeline.cc.

Patch available
Fix from $1,600 2022-06-19
Libjxl MEDIUM 5.5
CVE-2021-45928

libjxl b02d6b9, as used in libvips 8.11 through 8.11.2 and other products, has an out-of-bounds write in jxl::ModularFrameDecoder::DecodeGroup (calle…

Fix: 0.6.1+
Fix from $1,600 2022-01-01
Libjxl MEDIUM 5.5
CVE-2021-22564

For certain valid JPEG XL images with a size slightly larger than an integer number of groups (256x256 pixels) when processing the groups out of orde…

Fix: after 0.6.0
Fix from $1,600 2021-11-01
Libjxl MEDIUM 6.5
CVE-2021-36692

libjxl v0.3.7 is affected by a Divide By Zero in issue in lib/extras/codec_apng.cc jxl::DecodeImageAPNG(). When encoding a malicous APNG file using c…

Patch available
Fix from $1,600 2021-08-30
Libjxl HIGH 7.5
CVE-2021-36691

libjxl v0.5.0 is affected by a Assertion failed issue in lib/jxl/image.cc jxl::PlaneBase::PlaneBase(). When encoding a malicous GIF file using cjxl, …

No fix yet
Fix from $1,950 2021-08-30
Libjxl CRITICAL 9.8
CVE-2021-27804

JPEG XL (aka jpeg-xl) through 0.3.2 allows writable memory corruption.

Fix: after 0.3.2
Fix from $2,300 2021-03-02