Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-82522

libjxl < 0.12.0 Container Box Parser Integer Underflow via 32-bit Size Truncation

libjxl before 0.12 contains an integer underflow vulnerability in the container box parser that allows remote attackers to inject arbitrary metadata by exploiting 64-bit box size truncation to size_t on 32-bit platforms. Attackers can supply a crafted JPEG XL file causing the decoder to parse attacker-controlled codestream bytes as phantom box headers, enabling injection of arbitrary metadata (Exif, XMP, IPTC, JUMBF) and potential out-of-bounds reads.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Libjxl Libjxl Project
Products
Libjxl Libjxl
CVE-2026-52584

libjxl: libjxl: Information disclosure via Buffer Overflow in DecodeImageAPNG function

Buffer Overflow vulnerability in libjxl v.0.11.2 and before allows a local attacker to obtain sensitive information via the DecodeImageAPNG function

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Libjxl
Products
Libjxl
CVE-2025-70103

Heap Buffer Overflow in libjxl Decoding of PBM Images

Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras::DecodeImagePNM function in file lib/extras/dec/pnm.cc.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Libjxl
Products
Libjxl