Summary
It was discovered that libjxl did not properly handle certain crafted PBM
images. An attacker could possibly use this issue to cause libjxl to crash,
resulting in a denial of service, or execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 25.10 | jpeg-xl | 0.11.1-6ubuntu1.2 |
| Ubuntu · 26.04 LTS 26.04:LTS | jpeg-xl | 0.11.1-6ubuntu4.2 |
Vulnerabilities 1
-
High 7.3
Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras::DecodeImagePNM function …
References
-
report
https://ubuntu.com/security/CVE-2025-70103