Описание
libjxl b02d6b9, as used in libvips 8.11 through 8.11.2 and other products, has an out-of-bounds write in jxl::ModularFrameDecoder::DecodeGroup (called from jxl::FrameDecoder::ProcessACGroup and jxl::ThreadPool::RunCallState<jxl::FrameDecoder::ProcessSections).
| Релиз | Статус | Примечание |
|---|---|---|
| trusty | ignored | end of standard support |
| upstream | not-affected | debian: fixed before inital upload to Debian |
| xenial | ignored | end of standard support |
Показывать по
Ссылки на источники
2.1 Low
CVSS2
5.5 Medium
CVSS3
Связанные уязвимости
libjxl b02d6b9, as used in libvips 8.11 through 8.11.2 and other products, has an out-of-bounds write in jxl::ModularFrameDecoder::DecodeGroup (called from jxl::FrameDecoder::ProcessACGroup and jxl::ThreadPool::RunCallState<jxl::FrameDecoder::ProcessSections).
libjxl b02d6b9, as used in libvips 8.11 through 8.11.2 and other produ ...
libjxl b02d6b9, as used in libvips 8.11 through 8.11.2 and other products, has an out-of-bounds write in jxl::ModularFrameDecoder::DecodeGroup (called from jxl::FrameDecoder::ProcessACGroup and jxl::ThreadPool::RunCallState<jxl::FrameDecoder::ProcessSections).
2.1 Low
CVSS2
5.5 Medium
CVSS3