There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to 256mb is possible, maybe 512mb), potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend upgrading past commit 65fbec56bc578b6b6ee02a527be70787bbd053b0.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libjxl | Aug 8, 2025 | Nov 25, 2024 |
| Debian | — | Upgrade jpeg-xl | May 15, 2025 | Nov 25, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 25, 2024 |
| Suse | — | Upgrade libjxl0_11Upgrade jxl-thumbnailerUpgrade libmozjs-128-0Upgrade libmozjs-115-0Upgrade gimp-plugin-jxlUpgrade libjxl0_8-32bitUpgrade libjxl0_8-64bitUpgrade libjxl0_11-x86-64-v3Upgrade mozjs115Upgrade libjxl-develUpgrade mozjs128-develUpgrade libjxl0_8Upgrade libjxl-toolsUpgrade mozjs128Upgrade gdk-pixbuf-loader-jxlUpgrade mozjs115-devel | Jan 3, 2025 | Nov 25, 2024 |
| Ubuntu | — | Upgrade libjpegxl-javaUpgrade libjxl-toolsUpgrade libjxl0.7 | Jul 7, 2025 | Nov 25, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub