OSV-2026-1356

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libjxl/OSV-2026-1356.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-1356
Published
2026-10-03T00:21:03Z
Modified
2026-10-28T12:15:03Z
Summary
Use-of-uninitialized-value in jxl::RenderPipeline::InputReady
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=568295899

Crash type: Use-of-uninitialized-value
Crash state:
jxl::RenderPipeline::InputReady
jxl::RenderPipelineInput::Done
jxl::FrameDecoder::ProcessACGroup
References

Affected packages

OSS-Fuzz / libjxl

Package

Name
libjxl
Purl
pkg:generic/libjxl

Affected ranges

Type
GIT
Repo
https://github.com/libjxl/libjxl.git
Events
Introduced
05f95ed13b9eebae2c3b478e3e45e87b86fbc634
Fixed
ddfd9a18fa2156b064d08a319d741d00189dc250

Ecosystem specific 

{
    "severity":  "MEDIUM"
}

Database specific

introduced_range 
"e394120180f7bae73506c9c4435ed95092709a19:5f92f524f1407de323c409c360ab38cae1d97b27"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libjxl/OSV-2026-1356.yaml"