The jxl-grid crate on 32-bit platforms suffers from an integer overflow vulnerability in the calculation of buffer sizes during image decoding. Specifically, the product of width and height is computed without overflow checks, which on 32-bit systems can wrap around and cause allocation of buffers that are too small. Subsequent writes to these buffers during image rendering can lead to out-of-bounds memory writes. This can be triggered by decoding crafted JPEG XL images with either very large frames or small cropped frames within a large canvas. The vulnerability is tracked as CVE-2026-52834 and affects jxl-grid versions before 0.6.2.

On affected 32-bit platforms, decoding a maliciously crafted JPEG XL image can cause out-of-bounds memory writes due to integer overflow in buffer size calculations. This memory corruption can lead to arbitrary code execution. The vulnerability impacts confidentiality, integrity, and availability as indicated by the CVSS vector (C:L/I:L/A:H). There are no known exploits in the wild at this time.

A fix is available in jxl-grid version 0.6.2 and later. Users should upgrade to version 0.6.2 or newer to remediate this vulnerability. No additional mitigation steps are indicated by the vendor advisory.