Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-23ff-wfv3-xrvg

Опубликовано: 25 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 6.9

Описание

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to 256mb is possible, maybe 512mb), potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend upgrading past commit 65fbec56bc578b6b6ee02a527be70787bbd053b0.

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to 256mb is possible, maybe 512mb), potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend upgrading past commit 65fbec56bc578b6b6ee02a527be70787bbd053b0.

EPSS

Процентиль: 18%
0.00058
Низкий

6.9 Medium

CVSS4

Дефекты

CWE-400

Связанные уязвимости

ubuntu
7 месяцев назад

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to 256mb is possible, maybe 512mb), potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend upgrading past commit 65fbec56bc578b6b6ee02a527be70787bbd053b0.

CVSS3: 5.3
redhat
7 месяцев назад

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to 256mb is possible, maybe 512mb), potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend upgrading past commit 65fbec56bc578b6b6ee02a527be70787bbd053b0.

nvd
7 месяцев назад

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to 256mb is possible, maybe 512mb), potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend upgrading past commit 65fbec56bc578b6b6ee02a527be70787bbd053b0.

debian
7 месяцев назад

There exists a stack buffer overflow in libjxl.A specifically-crafted ...

suse-cvrf
5 месяцев назад

Security update for libjxl

EPSS

Процентиль: 18%
0.00058
Низкий

6.9 Medium

CVSS4

Дефекты

CWE-400