The JXL encoder has an heap write overflow when a user specifies that the image should be encoded as 16 bit floats.
{
"github_reviewed_at": "2026-04-14T18:50:40Z",
"severity": "MODERATE",
"cwe_ids": [
"CWE-122"
],
"github_reviewed": true,
"nvd_published_at": "2026-04-13T22:16:29Z"
}