critical9.8
CVE-2021-27804
JPEG XL (aka jpeg-xl) through 0.3.2 allows writable memory corruption.
Impact
JPEG XL (aka jpeg-xl) through 0.3.2 allows writable memory corruption.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Libjxl Project | Libjxl | through 0.3.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/161623/jpeg-xl-0.3.1-Memory-Corruption.html
- http://seclists.org/fulldisclosure/2021/Mar/2
- http://www.openwall.com/lists/oss-security/2021/03/01/3
- https://gitlab.com/wg1/jpeg-xl/-/tags
- http://packetstormsecurity.com/files/161623/jpeg-xl-0.3.1-Memory-Corruption.html
- http://seclists.org/fulldisclosure/2021/Mar/2
- http://www.openwall.com/lists/oss-security/2021/03/01/3
- https://gitlab.com/wg1/jpeg-xl/-/tags