OSV-2025-857

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libjxl/OSV-2025-857.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2025-857
Published
2025-10-25T00:05:52.218420Z
Modified
2025-10-25T00:05:52.218807Z
Summary
Global-buffer-overflow in void jxl::N_AVX2::WriteToOutputStage::StoreUnsignedRow<unsigned char>
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=454749502

Crash type: Global-buffer-overflow READ 16
Crash state:
void jxl::N_AVX2::WriteToOutputStage::StoreUnsignedRow&lt;unsigned char>
jxl::N_AVX2::WriteToOutputStage::OutputBuffers
jxl::N_AVX2::WriteToOutputStage::ProcessRow
References

Affected packages

OSS-Fuzz / libjxl

Package

Name
libjxl
Purl
pkg:generic/libjxl

Affected ranges

Type
GIT
Repo
https://github.com/libjxl/libjxl.git
Events
Introduced
2a4f12b6ef22672e0f4a399df3b8589856ebace2
Fixed
e5943b1a5a8ab4518202ad8bb6689cf5242246bc

Ecosystem specific 

{
    "severity": null
}

Database specific

fixed_range

"7cac2ac860e41f7f4199b73508490016a8af204c:e5943b1a5a8ab4518202ad8bb6689cf5242246bc"