OSV-2021-871

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2021-871

Published

2021-06-18T00:01:06.679821Z

Modified

2022-04-13T03:04:41.854039Z

Summary

Heap-use-after-free in jxl::ImageBlender::PrepareBlending

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35293

Crash type: Heap-use-after-free READ 8
Crash state:
jxl::ImageBlender::PrepareBlending
jxl::FinalizeFrameDecoding
jxl::FrameDecoder::Flush

References

Affected packages

Type: GIT
Repo: https://github.com/libjxl/libjxl.git
Events: Introduced

dbf8653bf9c654c42406dab4b55c024f0d879cd8

Fixed

95eea7e89d0bf4303f6e30e8148b0fc309517d6b

{
    "severity": "HIGH"
}