3.6
CVSSv2

CVE-2021-22563

Published: 01/11/2021 Updated: 03/11/2021
CVSS v2 Base Score: 3.6 | Impact Score: 4.9 | Exploitability Score: 3.9
CVSS v3 Base Score: 4.4 | Impact Score: 2.5 | Exploitability Score: 1.8
VMScore: 320
Vector: AV:L/AC:L/Au:N/C:N/I:P/A:P

Vulnerability Summary

Invalid JPEG XL images using libjxl can cause an out of bounds access on a std::vector<std::vector<T>> when rendering splines. The OOB read access can either lead to a segfault, or rendering splines based on other process memory. It is recommended to upgrade past 0.6.0 or patch with github.com/libjxl/libjxl/pull/757

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

libjxl project libjxl

Vendor Advisories

Invalid JPEG XL images using libjxl before version 061 can cause an out of bounds access on a std::vector&lt;std::vector&lt;T&gt;&gt; when rendering splines The OOB read access can either lead to a segfault, or rendering splines based on other process memory ...