Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-12474

Опубликовано: 11 фев. 2026
Источник: nvd
CVSS3: 4.4
EPSS Низкий

Описание

A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory.

This can be done by causing the decoder to reference an outside-image-bound area in a subsequent patches. An incorrect optimization causes the decoder to omit populating those areas.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:libjxl_project:libjxl:*:*:*:*:*:*:*:*
Версия от 0.7.0 (включая) до 0.11.1 (включая)

EPSS

Процентиль: 1%
0.00101
Низкий

4.4 Medium

CVSS3

Дефекты

CWE-908

Связанные уязвимости

CVSS3: 4.4
ubuntu
5 месяцев назад

A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory. This can be done by causing the decoder to reference an outside-image-bound area in a subsequent patches. An incorrect optimization causes the decoder to omit populating those areas.

CVSS3: 3.1
redhat
5 месяцев назад

A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory. This can be done by causing the decoder to reference an outside-image-bound area in a subsequent patches. An incorrect optimization causes the decoder to omit populating those areas.

CVSS3: 4.4
debian
5 месяцев назад

A specially-crafted file can cause libjxl's decoder to read pixel data ...

CVSS3: 4.8
redos
4 дня назад

Уязвимость jpegxl

CVSS3: 4.4
github
5 месяцев назад

A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory. This can be done by causing the decoder to reference an outside-image-bound area in a subsequent patches. An incorrect optimization causes the decoder to omit populating those areas.

EPSS

Процентиль: 1%
0.00101
Низкий

4.4 Medium

CVSS3

Дефекты

CWE-908