CVE-2025-70103 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.3 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 28%

Amazon Linux Releases

Amazon Package

Release

jpegxl-debuginfo

Amazon Linux 2023

1:0.10.3-56.amzn2023

fixed

jpegxl-debugsource

Amazon Linux 2023

1:0.10.3-56.amzn2023

fixed

jpegxl-doc

Amazon Linux 2023

1:0.10.3-56.amzn2023

fixed

jxl-pixbuf-loader

Amazon Linux 2023

1:0.10.3-56.amzn2023

fixed

jxl-pixbuf-loader-debuginfo

Amazon Linux 2023

1:0.10.3-56.amzn2023

fixed

libjxl

Amazon Linux 2023

1:0.10.3-56.amzn2023

fixed

libjxl-debuginfo

Amazon Linux 2023

1:0.10.3-56.amzn2023

fixed

libjxl-devel

Amazon Linux 2023

1:0.10.3-56.amzn2023

fixed

libjxl-devtools

Amazon Linux 2023

1:0.10.3-56.amzn2023

fixed

libjxl-devtools-debuginfo

Amazon Linux 2023

1:0.10.3-56.amzn2023

fixed

libjxl-utils

Amazon Linux 2023

1:0.10.3-56.amzn2023

fixed

libjxl-utils-debuginfo

Amazon Linux 2023

1:0.10.3-56.amzn2023

fixed

Common Weakness Enumeration

CWE-122 - Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

References

https://github.com/libjxl/libjxl/issues/4337

https://github.com/libjxl/libjxl/pull/4338

https://github.com/sigdevel/pocs/blob/main/res/libjxl/2025/2

https://infosec.exchange/@sigdevel/116642233929409910

http://www.openwall.com/lists/oss-security/2026/05/30/7

https://github.com/libjxl/libjxl/issues/4337