libjxl CVE-2026-52584
HIGHSeverity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Crafted-file parsing bug needs no privileges (PR:N) but requires the victim to decode the malicious APNG (UI:R, AV:L); primary impact is memory disclosure (C:H) with a possible decoder crash (A:L) and no integrity impact.
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
5DescriptionCVE.org
Buffer Overflow vulnerability in libjxl v.0.11.2 and before allows a local attacker to obtain sensitive information via the DecodeImageAPNG function
AnalysisAI
Memory-disclosure via heap buffer overflow in libjxl (the JPEG XL reference codec) versions 0.11.2 and earlier lets an attacker who supplies a crafted APNG image trigger an out-of-bounds access in the DecodeImageAPNG function, leaking sensitive process memory. The upstream fix (PR #4804) adds a missing row-index bounds check before accessing frame rows. No public exploit identified at time of analysis; EPSS is low (0.15%, 5th percentile) and the issue is not listed in CISA KEV.
Technical ContextAI
libjxl is the reference encoder/decoder for the JPEG XL image format and ships its APNG import path in lib/extras/dec/apng.cc. The flaw lives in DecodeImageAPNG, where the decoder writes/reads frame rows without verifying that the destination buffer (ctx.frameRaw.rows) is large enough for the declared ysize, allowing an out-of-bounds access when a malformed APNG advertises more rows than were allocated. CWE-121 (stack-based buffer overflow) is the assigned root-cause class, though the patch comment and code path describe a heap buffer overflow on the frame-row buffer - a discrepancy worth noting. The corrective check 'if (ctx.frameRaw.rows.size() < ysize) return JXL_FAILURE("Row index out of bounds")' confirms the missing length validation as the defect.
RemediationAI
Upstream fix available (PR/commit at https://github.com/libjxl/libjxl/pull/4804); a released patched version number is not independently confirmed from the provided data, so track the libjxl release that incorporates PR #4804 and upgrade to it, or rebuild from a source tree that contains the added row-index bounds check. Until a tagged release is adopted, compensating controls include disabling or blocking APNG input in applications that use libjxl (the affected code is the APNG import path specifically, so restricting to other formats avoids the bug at the cost of losing APNG support), validating or sandboxing image-decoding workloads so a memory leak or crash cannot expose adjacent process data, and refusing to auto-process untrusted APNG files. Reference the tracking issue https://github.com/libjxl/libjxl/issues/4803 and advisory https://vuldb.com/vuln/379982 for status.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same weakness CWE-121 – Stack-based Buffer Overflow
View allSame technique Buffer Overflow
View allVendor StatusVendor
SUSE
Severity: Moderate| Product | Status |
|---|---|
| SUSE Linux Enterprise Module for Package Hub 15 SP7 | Affected |
| SUSE Linux Enterprise Server 16.1 | Affected |
| SUSE Linux Enterprise Server for SAP applications 16.1 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today