OSV-2024-6

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libjxl/OSV-2024-6.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2024-6
Published
2024-01-06T00:11:05.929725Z
Modified
2024-03-08T14:19:24.750958Z
Summary
Global-buffer-overflow in void jxl::N_AVX2::WriteToOutputStage::StoreUnsignedRow<unsigned char>
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65533

Crash type: Global-buffer-overflow READ 16
Crash state:
void jxl::N_AVX2::WriteToOutputStage::StoreUnsignedRow&lt;unsigned char>
jxl::N_AVX2::WriteToOutputStage::OutputBuffers
jxl::N_AVX2::WriteToOutputStage::ProcessRow
References

Affected packages

OSS-Fuzz / libjxl

Package

Name
libjxl
Purl
pkg:generic/libjxl

Affected ranges

Type
GIT
Repo
https://github.com/libjxl/libjxl.git
Events
Introduced
815858b2335c267727c4b438cfdc00d5499791e0
Fixed
2a7b35f6f29a288496232bb62c65a706209b5557

Ecosystem specific 

{
    "severity": null
}

Database specific

fixed_range

"815858b2335c267727c4b438cfdc00d5499791e0:2a7b35f6f29a288496232bb62c65a706209b5557"

source

"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libjxl/OSV-2024-6.yaml"