OSV-2022-480

    Dashboard / Vulnerabilities / OSV-2022-480

    OSV-2022-480

    Published: 15 Jun 2022Last Modified: 15 Jun 2022

    Summary: Heap-buffer-overflow in jxl::JxlBoxContentDecoder::Process

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48029 ``` Crash type: Heap-buffer-overflow READ {*} Crash state: jxl::JxlBoxContentDecoder::Process HandleBoxes JxlDecoderProcessInput ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48029

    Affected packages

    Package

    Name: libjxl

    Purl: pkg:generic/libjxl

    Affected ranges

    Type: GIT

    Events:

    Introduced- b7076f1869914eee47b3eae107750f3a3ce43a76
    Fixed -746d1f5e8498f501238894899c301e70ea57e2aa

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2022-480 | CVE-DB