Libjxl (Google) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-02-11. Vendor: Google.

CVEs of Libjxl

• CVE-2026-1837 - CVSS 8.8 (high), 2026-02-11: A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after that data from another uninitialized…
• CVE-2025-12474 - CVSS 4.4 (medium), 2026-02-11: A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory. This can be done by causing the decoder to…