An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, such as an infinite loop.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HLibjxl Project Libjxl
APPLibjxl Project< 0.8.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
Related vulnerabilities
CVE-2021-27804CRITICAL9.8ten sam produkt
JPEG XL (aka jpeg-xl) through 0.3.2 allows writable memory corruption.
CVE-2026-1837HIGH8.7ten sam produkt
A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. S...
CVE-2021-36691HIGH7.5ten sam produkt
libjxl v0.5.0 is affected by a Assertion failed issue in lib/jxl/image.cc jxl::PlaneBase::PlaneBase(). When en...
CVE-2024-11403MEDIUM6.9ten sam produkt
There exists an out of bounds read/write in LibJXL versions prior to commit 9cc451b91b74ba470fd72bd48c121e9f33...
CVE-2024-11498MEDIUM6.9ten sam produkt
There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to u...