OSV-2021-861

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libjxl/OSV-2021-861.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2021-861
Published
2021-06-15T00:01:22.972854Z
Modified
2022-04-13T03:04:41.790968Z
Summary
Use-of-uninitialized-value in jxl::N_AVX2::FloatToRGBA8
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35231

Crash type: Use-of-uninitialized-value
Crash state:
jxl::N_AVX2::FloatToRGBA8
jxl::FinalizeImageRect
jxl::ThreadPool::RunCallState<jxl::FinalizeFrameDecoding
References

Affected packages

OSS-Fuzz / libjxl

Package

Name
libjxl
Purl
pkg:generic/libjxl

Affected ranges

Type
GIT
Repo
https://github.com/libjxl/libjxl.git
Events
Introduced
7b974a32bc5620ff0c02b1c0b101d421b3edc44a
Fixed
4f97fa00ed1432e910817813b07f7d16817e353b

Ecosystem specific 

{
    "severity": "MEDIUM"
}