Skip to main content
VulnerabilityPublished Updated

jxl::WriteToPixelCallbackStage::ProcessRow · OSV-2022-608: Heap-use-after-free

Affects libjxlSource GCVE Database

0
Severity
Medium

Rated by Threat Radar

Data as of 2 Jul 2026, 23:25 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzlibjxlpkg:generic/libjxlOther threatsAffected
  • v0.7-base – v1.0-snapshot
  • >=eafb38fb4f3d2e00f9402a0c09ac592ebfd6a795
35 affected builds		Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should monitor the libjxl project and OSS-Fuzz reports for updates and apply patches once available.

Description

A heap-use-after-free vulnerability exists in the libjxl library within the function jxl::WriteToPixelCallbackStage::ProcessRow. This issue was reported by OSS-Fuzz and involves a read operation on freed heap memory, which can lead to undefined behavior or crashes when processing image data.

References

Community reviews

Loading reviews…