Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2024-11498

Опубликовано: 25 нояб. 2024
Источник: ubuntu
Приоритет: medium
EPSS Низкий

Описание

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to 256mb is possible, maybe 512mb), potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend upgrading past commit 65fbec56bc578b6b6ee02a527be70787bbd053b0.

РелизСтатусПримечание
devel

not-affected

0.11.1-4
esm-apps/noble

needs-triage

esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

needs-triage

oracular

needs-triage

plucky

not-affected

0.11.1-4
upstream

released

0.10.4-1

Показывать по

Ссылки на источники

EPSS

Процентиль: 18%
0.00058
Низкий

Связанные уязвимости

CVSS3: 5.3
redhat
7 месяцев назад

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to 256mb is possible, maybe 512mb), potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend upgrading past commit 65fbec56bc578b6b6ee02a527be70787bbd053b0.

nvd
7 месяцев назад

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to 256mb is possible, maybe 512mb), potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend upgrading past commit 65fbec56bc578b6b6ee02a527be70787bbd053b0.

debian
7 месяцев назад

There exists a stack buffer overflow in libjxl.A specifically-crafted ...

suse-cvrf
5 месяцев назад

Security update for libjxl

github
7 месяцев назад

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to 256mb is possible, maybe 512mb), potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend upgrading past commit 65fbec56bc578b6b6ee02a527be70787bbd053b0.

EPSS

Процентиль: 18%
0.00058
Низкий