OSV-2026-711

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libjxl/OSV-2026-711.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-711
Published
2026-05-11T00:06:03.191988Z
Modified
2026-08-27T14:21:53.069517Z
Summary
Use-of-uninitialized-value in jxl::PerformMulBlending
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=511400706

Crash type: Use-of-uninitialized-value
Crash state:
jxl::PerformMulBlending
jxl::PerformBlending
jxl::N_AVX2::BlendingStage::ProcessRow
References

Affected packages

OSS-Fuzz / libjxl

Package

Name
libjxl
Purl
pkg:generic/libjxl

Affected ranges

Type
GIT
Repo
https://github.com/libjxl/libjxl.git
Events
Introduced
efd4c04dc1c493534fdd6b1d92d7c6d0e7ff9d3f

Affected versions

v0.*
v0.12-snapshot
v0.12.0

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

introduced_range 
"37bbfd09b4fd42554940ac2c0b72a1121cfa6d8a:7cc4da3a4a3b83e0e5d6bea22e48474f3f8b6fcc"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libjxl/OSV-2026-711.yaml"