Back to search
CVE-2024-11498
Published: Nov 25, 2024
Modified: Nov 25, 2024
PUBLISHED
Description
There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to 256mb is possible, maybe 512mb), potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend upgrading past commit 65fbec56bc578b6b6ee02a527be70787bbd053b0.
| Vendor | Product | Versions |
|---|---|---|
libjxl | libjxl | affected 0.11.0 - < 65fbec56bc578b6b6ee02a527be70787bbd053b0affected 0.10.0-2 - < 65fbec56bc578b6b6ee02a527be70787bbd053b0affected 0.9.0-3 - < 65fbec56bc578b6b6ee02a527be70787bbd053b0affected 0.8.0-3 - < 65fbec56bc578b6b6ee02a527be70787bbd053b0affected 0.7.0-1 - < 65fbec56bc578b6b6ee02a527be70787bbd053b0 |
Weaknesses (CWE)
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now