Skip to main content
VulnerabilityPublished Updated

jxl::N_EMU128::WriteToU8Stage::ProcessRow · OSV-2022-725: Heap-buffer-overflow

Affects libjxlSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 2 Jul 2026, 23:24 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzlibjxlpkg:generic/libjxlOther threatsAffected
  • v0.8.0 – v0.12.0
  • >=a50e71631cabfbdd57d540ba080ecec19b4664af
27 affected builds
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until an official fix is available, users should consider avoiding use of affected libjxl versions or apply any available updates from the libjxl project. Monitor official libjxl channels for patches addressing this issue.

Description

A heap-buffer-overflow vulnerability exists in the libjxl library within the jxl::N_EMU128::WriteToU8Stage::ProcessRow function. This issue was reported by OSS-Fuzz and involves an out-of-bounds write on the heap during image processing. Multiple versions of libjxl up to and including 0.12.0 are affected. No official patch or remediation information is provided in the available data.

References

Community reviews

Loading reviews…