Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-28026
7.8
HIGHCVSS v3
Published
March 5, 2021
CVSS v2
6.8 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
jpeg-xl v0.3.2 is affected by a heap buffer overflow in /lib/jxl/coeff_order.cc ReadPermutation. When decoding a malicous jxl file using djxl, an attacker can trigger arbitrary code execution or a denial of service.
wg1/jpeg-xlGitLabJPEG XL image format reference implementation.
Mirror from https://github.com/libjxl/libjxl, info on latest releases there!
GitLabJPEG XL image format reference implementation.
Mirror from https://github.com/libjxl/libjxl, info on latest releases there!= 0.3.2NVD