oss-sec: CVE-2025-70103: Heap-based Buffer Overflow in libjxl/cjxl via jxl::extras::DecodeImagePNM on crafted PBM file

Read full story on seclists.org
Share
oss-sec: CVE-2025-70103: Heap-based Buffer Overflow in libjxl/cjxl via jxl::extras::DecodeImagePNM on crafted PBM file
AI disclosure

Summary

Product: JPEG XL Affected: cjxl/libjxl prior to fix commit (see References) CVE: CVE-2025-70103 CWE: CWE-122 (Heap-based Buffer Overflow) CVSS 3.1: 8.8 HIGH (AV...

Original reporting

Open original source

Related coverage

Read full article on seclists.org