Skip to content
OpenAdvisories

Package · crates.io

jxl-oxide

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.2
    GHSA-66m8-c62j-h6v5

    jxl-oxide: `FrameBuffer::new` creates out-of-bounds slices on overflow

    ### Summary `jxl-oxide` exposes a public safe API that can construct an undersized `FrameBuffer` due to unchecked `usize` multiplication, which immediately trigger panic while initializing the buffer in normal decoding path. Additionally, calling the safe gro…

    jxl-oxide crates.io