← Database

CVE-2021-45928

MEDIUM CVSS: 5.5 Published: 2022-01-01 Modified: 2026-06-17

Description

libjxl b02d6b9, as used in libvips 8.11 through 8.11.2 and other products, has an out-of-bounds write in jxl::ModularFrameDecoder::DecodeGroup (called from jxl::FrameDecoder::ProcessACGroup and jxl::ThreadPool::RunCallState

Affected Platforms

Libjxl Project Libjxl

Weakness Type

CWE-787

References