OSV-2026-711

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libjxl/OSV-2026-711.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-711
Published
2026-05-11T00:06:03Z
Modified
2026-10-27T14:45:09Z
Summary
Use-of-uninitialized-value in jxl::PerformMulBlending
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=511400706

Crash type: Use-of-uninitialized-value
Crash state:
jxl::PerformMulBlending
jxl::PerformBlending
jxl::N_AVX2::BlendingStage::ProcessRow
References

Affected packages

OSS-Fuzz / libjxl

Package

Name
libjxl
Purl
pkg:generic/libjxl

Affected ranges

Type
GIT
Repo
https://github.com/libjxl/libjxl.git
Events
Introduced
efd4c04dc1c493534fdd6b1d92d7c6d0e7ff9d3f
Fixed
ec2982b1f79e9eebf5a514df759d0bb41b8f240d

Affected versions

v0.*
v0.12-snapshot
v0.12.0

Ecosystem specific 

{
    "severity":  "MEDIUM"
}

Database specific

fixed_range 
"e47d2a2b5bb418f2947ce07f36cb048861db3820:ec2982b1f79e9eebf5a514df759d0bb41b8f240d"
introduced_range 
"37bbfd09b4fd42554940ac2c0b72a1121cfa6d8a:7cc4da3a4a3b83e0e5d6bea22e48474f3f8b6fcc"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libjxl/OSV-2026-711.yaml"