Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9gvg-fw8p-72fv

Опубликовано: 11 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 2.3
CVSS3: 4.4

Описание

A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory.

This can be done by causing the decoder to reference an outside-image-bound area in a subsequent patches. An incorrect optimization causes the decoder to omit populating those areas.

A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory.

This can be done by causing the decoder to reference an outside-image-bound area in a subsequent patches. An incorrect optimization causes the decoder to omit populating those areas.

EPSS

Процентиль: 1%
0.00101
Низкий

2.3 Low

CVSS4

4.4 Medium

CVSS3

Дефекты

CWE-908

Связанные уязвимости

CVSS3: 4.4
ubuntu
5 месяцев назад

A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory. This can be done by causing the decoder to reference an outside-image-bound area in a subsequent patches. An incorrect optimization causes the decoder to omit populating those areas.

CVSS3: 3.1
redhat
5 месяцев назад

A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory. This can be done by causing the decoder to reference an outside-image-bound area in a subsequent patches. An incorrect optimization causes the decoder to omit populating those areas.

CVSS3: 4.4
nvd
5 месяцев назад

A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory. This can be done by causing the decoder to reference an outside-image-bound area in a subsequent patches. An incorrect optimization causes the decoder to omit populating those areas.

CVSS3: 4.4
debian
5 месяцев назад

A specially-crafted file can cause libjxl's decoder to read pixel data ...

CVSS3: 4.8
redos
3 дня назад

Уязвимость jpegxl

EPSS

Процентиль: 1%
0.00101
Низкий

2.3 Low

CVSS4

4.4 Medium

CVSS3

Дефекты

CWE-908