CVE-2024-11498
EUVD-2024-3383125.11.2024, 14:15
There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to 256mb is possible, maybe 512mb), potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend upgrading past commit 65fbec56bc578b6b6ee02a527be70787bbd053b0.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| libjxl_project | libjxl | 𝑥 < 0.8.4 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases