Summary
Daniel Novomeský discovered that libjxl did not properly manage memory when
decoding certain files. An attacker could use this issue to cause
libjxl to crash, resulting in denial of service, or possibly execute
arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 25.10 | jpeg-xl | 0.11.1-6ubuntu1.1 |
References
-
report
https://ubuntu.com/security/CVE-2026-1837