Поиск уязвимостей
Количество 19
Количество 19
openSUSE-SU-2026:20385-1
Security update for libjxl
SUSE-SU-2026:0648-1
Security update for libjxl
ALT-PU-2026-2640
ALT-PU-2026-2640: package `libjxl` update to version 0.11.2-alt1
CVE-2026-1837
A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after that data from another uninitialized unallocated region is copied to pixel data. This can be done by requesting color transformation of grayscale images to another grayscale color space. Buffers allocated for 1-float-per-pixel are used as if they are allocated for 3-float-per-pixel. That happens only if LCMS2 is used as CMS engine. There is another CMS engine available (selected by build flags).
CVE-2026-1837
A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after that data from another uninitialized unallocated region is copied to pixel data. This can be done by requesting color transformation of grayscale images to another grayscale color space. Buffers allocated for 1-float-per-pixel are used as if they are allocated for 3-float-per-pixel. That happens only if LCMS2 is used as CMS engine. There is another CMS engine available (selected by build flags).
CVE-2026-1837
A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after that data from another uninitialized unallocated region is copied to pixel data. This can be done by requesting color transformation of grayscale images to another grayscale color space. Buffers allocated for 1-float-per-pixel are used as if they are allocated for 3-float-per-pixel. That happens only if LCMS2 is used as CMS engine. There is another CMS engine available (selected by build flags).
CVE-2026-1837
A specially-crafted file can cause libjxl's decoder to write pixel dat ...
CVE-2025-12474
A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory. This can be done by causing the decoder to reference an outside-image-bound area in a subsequent patches. An incorrect optimization causes the decoder to omit populating those areas.
CVE-2025-12474
A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory. This can be done by causing the decoder to reference an outside-image-bound area in a subsequent patches. An incorrect optimization causes the decoder to omit populating those areas.
CVE-2025-12474
A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory. This can be done by causing the decoder to reference an outside-image-bound area in a subsequent patches. An incorrect optimization causes the decoder to omit populating those areas.
CVE-2025-12474
A specially-crafted file can cause libjxl's decoder to read pixel data ...
ROS-20260624-80-0019
Уязвимость jpegxl
ROS-20260624-80-0018
Уязвимость jpegxl
ROS-20260624-73-0019
Уязвимость jpegxl
ROS-20260624-73-0018
Уязвимость jpegxl
GHSA-9gvg-fw8p-72fv
A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory. This can be done by causing the decoder to reference an outside-image-bound area in a subsequent patches. An incorrect optimization causes the decoder to omit populating those areas.
GHSA-76gx-97cq-65f5
A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after that data from another uninitialized unallocated region is copied to pixel data. This can be done by requesting color transformation of grayscale images to another grayscale color space. Buffers allocated for 1-float-per-pixel are used as if they are allocated for 3-float-per-pixel. That happens only if LCMS2 is used as CMS engine. There is another CMS engine available (selected by build flags).
BDU:2026-09514
Уязвимость библиотеки Libjxl, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2026-09353
Уязвимость библиотеки Libjxl, связанная с использованием неинициализированного ресурса, позволяющая нарушителю вызвать отказ в обслуживании
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | openSUSE-SU-2026:20385-1 Security update for libjxl | 8 месяцев назад | ||
| SUSE-SU-2026:0648-1 Security update for libjxl | 9 месяцев назад | ||
| ALT-PU-2026-2640 ALT-PU-2026-2640: package `libjxl` update to version 0.11.2-alt1 | CVSS3: 9.8 | 9 месяцев назад | |
 | CVE-2026-1837 A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after that data from another uninitialized unallocated region is copied to pixel data. This can be done by requesting color transformation of grayscale images to another grayscale color space. Buffers allocated for 1-float-per-pixel are used as if they are allocated for 3-float-per-pixel. That happens only if LCMS2 is used as CMS engine. There is another CMS engine available (selected by build flags). | CVSS3: 7.5 | 0% Низкий | 9 месяцев назад |
 | CVE-2026-1837 A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after that data from another uninitialized unallocated region is copied to pixel data. This can be done by requesting color transformation of grayscale images to another grayscale color space. Buffers allocated for 1-float-per-pixel are used as if they are allocated for 3-float-per-pixel. That happens only if LCMS2 is used as CMS engine. There is another CMS engine available (selected by build flags). | CVSS3: 8.8 | 0% Низкий | 9 месяцев назад |
 | CVE-2026-1837 A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after that data from another uninitialized unallocated region is copied to pixel data. This can be done by requesting color transformation of grayscale images to another grayscale color space. Buffers allocated for 1-float-per-pixel are used as if they are allocated for 3-float-per-pixel. That happens only if LCMS2 is used as CMS engine. There is another CMS engine available (selected by build flags). | CVSS3: 7.5 | 0% Низкий | 9 месяцев назад |
| CVE-2026-1837 A specially-crafted file can cause libjxl's decoder to write pixel dat ... | CVSS3: 7.5 | 0% Низкий | 9 месяцев назад |
| CVE-2025-12474 A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory. This can be done by causing the decoder to reference an outside-image-bound area in a subsequent patches. An incorrect optimization causes the decoder to omit populating those areas. | CVSS3: 4.4 | 0% Низкий | 9 месяцев назад |
| CVE-2025-12474 A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory. This can be done by causing the decoder to reference an outside-image-bound area in a subsequent patches. An incorrect optimization causes the decoder to omit populating those areas. | CVSS3: 3.1 | 0% Низкий | 9 месяцев назад |
| CVE-2025-12474 A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory. This can be done by causing the decoder to reference an outside-image-bound area in a subsequent patches. An incorrect optimization causes the decoder to omit populating those areas. | CVSS3: 4.4 | 0% Низкий | 9 месяцев назад |
| CVE-2025-12474 A specially-crafted file can cause libjxl's decoder to read pixel data ... | CVSS3: 4.4 | 0% Низкий | 9 месяцев назад |
 | ROS-20260624-80-0019 Уязвимость jpegxl | CVSS3: 9.8 | 0% Низкий | 5 месяцев назад |
| ROS-20260624-80-0018 Уязвимость jpegxl | CVSS3: 4.8 | 0% Низкий | 5 месяцев назад |
| ROS-20260624-73-0019 Уязвимость jpegxl | CVSS3: 9.8 | 0% Низкий | 5 месяцев назад |
| ROS-20260624-73-0018 Уязвимость jpegxl | CVSS3: 4.8 | 0% Низкий | 5 месяцев назад |
| GHSA-9gvg-fw8p-72fv A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory. This can be done by causing the decoder to reference an outside-image-bound area in a subsequent patches. An incorrect optimization causes the decoder to omit populating those areas. | CVSS3: 4.4 | 0% Низкий | 9 месяцев назад |
| GHSA-76gx-97cq-65f5 A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after that data from another uninitialized unallocated region is copied to pixel data. This can be done by requesting color transformation of grayscale images to another grayscale color space. Buffers allocated for 1-float-per-pixel are used as if they are allocated for 3-float-per-pixel. That happens only if LCMS2 is used as CMS engine. There is another CMS engine available (selected by build flags). | CVSS3: 7.5 | 0% Низкий | 9 месяцев назад |
 | BDU:2026-09514 Уязвимость библиотеки Libjxl, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 9.8 | 0% Низкий | 11 месяцев назад |
| BDU:2026-09353 Уязвимость библиотеки Libjxl, связанная с использованием неинициализированного ресурса, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 4.8 | 0% Низкий | около 1 года назад |
Уязвимостей на страницу