CVE-2021-27804

Description

References

• packetstormsecurity.com/files/161623/jpeg-xl-0.3.1-Memory-Corruption.html · Third Party Advisory
• seclists.org/fulldisclosure/2021/Mar/2 · Third Party Advisory
• openwall.com/lists/oss-security/2021/03/01/3 · Mailing List
• gitlab.com/wg1/jpeg-xl/-/tags · Third Party Advisory

libjxl 的其他漏洞

• CVE-2026-1837高危 7.5A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after that data from anoth…
• CVE-2025-12474中危 4.4A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory. This can be done by causi…
• CVE-2024-11498高危 7.5There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack spac…
• CVE-2024-11403严重 9.8There exists an out of bounds read/write in LibJXL versions prior to commit 9cc451b91b74ba470fd72bd48c121e9f33d24c99. The JPEG decoder used …
• CVE-2023-35790高危 7.5An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of se…