Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-11498

Опубликовано: 25 нояб. 2024
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to 256mb is possible, maybe 512mb), potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend upgrading past commit 65fbec56bc578b6b6ee02a527be70787bbd053b0.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:libjxl_project:libjxl:*:*:*:*:*:*:*:*
Версия до 0.8.4 (исключая)

EPSS

Процентиль: 33%
0.00127
Низкий

7.5 High

CVSS3

Дефекты

CWE-400
NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 7.5
ubuntu
9 месяцев назад

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to 256mb is possible, maybe 512mb), potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend upgrading past commit 65fbec56bc578b6b6ee02a527be70787bbd053b0.

CVSS3: 5.3
redhat
9 месяцев назад

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to 256mb is possible, maybe 512mb), potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend upgrading past commit 65fbec56bc578b6b6ee02a527be70787bbd053b0.

CVSS3: 7.5
debian
9 месяцев назад

There exists a stack buffer overflow in libjxl.A specifically-crafted ...

suse-cvrf
6 месяцев назад

Security update for libjxl

CVSS3: 7.5
github
9 месяцев назад

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to 256mb is possible, maybe 512mb), potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend upgrading past commit 65fbec56bc578b6b6ee02a527be70787bbd053b0.

EPSS

Процентиль: 33%
0.00127
Низкий

7.5 High

CVSS3

Дефекты

CWE-400
NVD-CWE-noinfo