CVE-2021-28026

Publication date

2021-03-05 13:17:38

Family

mitre

State

PUBLISHED

Description

jpeg-xl v0.3.2 is affected by a heap buffer overflow in /lib/jxl/coeff_order.cc ReadPermutation. When decoding a malicous jxl file using djxl, an attacker can trigger arbitrary code execution or a denial of service.