Every CVE Search/ Get API key

CVE-2025-70103

Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras:...

7.3 HighFix available

Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras::DecodeImagePNM function in file lib/extras/dec/pnm.cc.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
Low

Exploit likelihood

0.43%Up 0.4 points since May 28, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.3

Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras::DecodeImagePNM function in file lib/extras/dec/pnm.cc.

Record
CVE-2025-70103
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weakness
CWE-122
Updated
2026-11-02
EUVDEUVD-2025-209978 7.3

Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras::DecodeImagePNM function in file lib/extras/dec/pnm.cc.

Record
EUVD-2025-209978
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
GitHub AdvisoriesGHSA-4xm2-q73p-253r 7.3

Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras:...

Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras::DecodeImagePNM function in file lib/extras/dec/pnm.cc.

Record
GHSA-4xm2-q73p-253r
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weakness
CWE-122
Updated
2026-11-02
NVD 7.3

Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras::DecodeImagePNM function in file lib/extras/dec/pnm.cc.

Record
CVE-2025-70103
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weakness
CWE-122
Updated
2026-11-02
OSVDEBIAN-CVE-2025-70103 7.3

Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras::DecodeImagePNM function in file lib/extras/dec/pnm.cc.

Record
DEBIAN-CVE-2025-70103
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVOESA-2026-3067 7.3

jpegxl security update

This package contains a reference implementation of JPEG XL (encoder and decoder).

Security Fix(es):

Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras::DecodeImagePNM function in file lib/extras/dec/pnm.cc.(CVE-2025-70103)

Record
OESA-2026-3067
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
Show 13 moreShow less
OSVUBUNTU-CVE-2025-70103 7.3

Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras::DecodeImagePNM function in file lib/extras/dec/pnm.cc.

Record
UBUNTU-CVE-2025-70103
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVMGASA-2026-0516 No score

Updated mozjs140 package fixes a security vulnerability

Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras::DecodeImagePNM function in file lib/extras/dec/pnm.cc. (CVE-2025-70103)

Record
MGASA-2026-0516
Updated
2026-11-02
OSVMGASA-2026-0548 No score

Updated libjxl package fixes security vulnerabilities

Uninitialized memory read in decoder due to incorrect optimization in patch handling. (CVE-2025-12474) Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras::DecodeImagePNM function in file lib/extras/dec/pnm.cc. (CVE-2025-70103) Out-of-bounds write in grayscale color transformation when using LCMS2. (CVE-2026-1837) Buffer Overflow vulnerability in libjxl v.0.11.2 and before allows a local attacker to obtain sensitive information via the DecodeImageAPNG function. (CVE-2026-52584)

Record
MGASA-2026-0548
Updated
2026-11-02
OSVopenSUSE-SU-2026:10910-1 No score

libjxl-devel-0.11.2-2.1 on GA media

These are all security issues fixed in the libjxl-devel-0.11.2-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10910-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:10935-1 No score

libmozjs-115-0-115.15.0-9.1 on GA media

These are all security issues fixed in the libmozjs-115-0-115.15.0-9.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10935-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:10955-1 No score

libmozjs-140-0-140.10.1-2.1 on GA media

These are all security issues fixed in the libmozjs-140-0-140.10.1-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10955-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21100-1 No score

Security update for libjxl

This update for libjxl fixes the following issue

  • CVE-2025-70103: heap buffer overflow when hen processing crafted pbm-images due to insufficient bounds checks (bsc#1266460).
Record
openSUSE-SU-2026:21100-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21114-1 No score

Security update for mozjs128

This update for mozjs128 fixes the following issue

  • CVE-2025-70103: libjxl: heap buffer overflow when hen processing crafted pbm-images due to insufficient bounds checks (bsc#1266463).
Record
openSUSE-SU-2026:21114-1
Updated
2026-11-02
OSVSUSE-SU-2026:22174-1 No score

Security update for libjxl

This update for libjxl fixes the following issue

  • CVE-2025-70103: heap buffer overflow when hen processing crafted pbm-images due to insufficient bounds checks (bsc#1266460).
Record
SUSE-SU-2026:22174-1
Updated
2026-11-02
OSVSUSE-SU-2026:22201-1 No score

Security update for mozjs128

This update for mozjs128 fixes the following issue

  • CVE-2025-70103: libjxl: heap buffer overflow when hen processing crafted pbm-images due to insufficient bounds checks (bsc#1266463).
Record
SUSE-SU-2026:22201-1
Updated
2026-11-02
OSVSUSE-SU-2026:22210-1 No score

Security update for mozjs128

This update for mozjs128 fixes the following issue

  • CVE-2025-70103: libjxl: heap buffer overflow when hen processing crafted pbm-images due to insufficient bounds checks (bsc#1266463).
Record
SUSE-SU-2026:22210-1
Updated
2026-11-02
OSVSUSE-SU-2026:2286-1 No score

Security update for libjxl

This update for libjxl fixes the following issues:

Security fixes:

  • CVE-2025-70103: heap buffer overflow when hen processing crafted pbm-images due to insufficient bounds checks (bsc#1266460).

Other fixes:

  • Update to version 0.10.5:
    • fix tile dimension in low memory rendering pipeline.
    • fix number of channels for gray-to-gray color transform.
    • djxl: reject decoding JXL files if 'packed' representation size overflows.
  • Changes from version 0.10.4:
    • Huffman lookup table size fix.
    • Check height limit in modular trees.
Record
SUSE-SU-2026:2286-1
Updated
2026-11-02
OSVUSN-8397-1 No score

jpeg-xl vulnerability

It was discovered that libjxl did not properly handle certain crafted PBM images. An attacker could possibly use this issue to cause libjxl to crash, resulting in a denial of service, or execute arbitrary code.

Record
USN-8397-1
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
jpeg-xl
Debian:12
 All versions, plus listed versions
0.10.3-10.10.3-20.10.3-30.10.3-40.10.3-5
Show 45 moreShow less
0.10.4-10.10.4-20.11.1-10.11.1-20.11.1-30.11.1-40.11.1-50.11.1-60.11.2-0.10.11.2-0.1~deb13u10.11.2-0.1~deb13u20.11.2-10.11.2-20.11.2-30.11.2-3~exp10.11.2-40.11.2-50.11.2-5.10.7.0-100.7.0-10+deb12u10.7.0-10.10.7.0-10.20.8.0-10.8.0~git20221120.4167056-10.8.0~git20221123.8bf8deb-10.8.0~git20230102.26a5158-10.8.0~git20230118.bcacd51-10.8.0~git20230125.a67e970-10.8.1-10.8.1-20.8.2-10.8.2-20.8.2-30.8.2-40.9.0~git20230612.38b629f-10.9.0~git20230612.38b629f-20.9.0~git20230612.38b629f-30.9.0~git20230612.38b629f-40.9.0~git20230623.689da0f-10.9.0~git20230623.689da0f-20.9.0~git20230623.689da0f-30.9.0~git20230623.689da0f-40.9.2-10.9.2-100.9.2-2
 None known
jpeg-xl
Debian:13
 before 0.11.2-0.1~deb13u2, plus listed versions
0.11.1-40.11.1-50.11.1-60.11.2-0.1~deb13u1
0.11.2-0.1~deb13u2
jpeg-xl
Debian:14
 before 0.11.2-5.1, plus listed versions
0.11.1-40.11.1-50.11.1-60.11.2-0.10.11.2-0.1~deb13u1
Show 7 moreShow less
0.11.2-0.1~deb13u20.11.2-10.11.2-20.11.2-30.11.2-3~exp10.11.2-40.11.2-5
0.11.2-5.1
mozjs140
Mageia:10
 before 140.17.0-1.mga10
140.17.0-1.mga10
libjxl
Mageia:10
From an advisory covering 4 CVEs
 before 0.11.2-1.mga10
0.11.2-1.mga10
jpegxl
openEuler:24.03-LTS-SP4
 before 0.11.2-3.oe2403sp4
0.11.2-3.oe2403sp4
libjxl
SUSE:Linux Enterprise Server 16.0
 before 0.11.2-160000.2.1
0.11.2-160000.2.1
libjxl
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 0.11.2-160000.2.1
0.11.2-160000.2.1
mozjs128
SUSE:Linux Enterprise Server 16.0
 before 128.14.0-160000.3.1
128.14.0-160000.3.1
mozjs128
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 128.14.0-160000.3.1
128.14.0-160000.3.1
Show 8 moreShow less
Affected packages
PackageAffectedFixed
jpeg-xl
Ubuntu:25.10
 before 0.11.1-6ubuntu1.2, plus listed versions
0.11.1-40.11.1-6ubuntu10.11.1-6ubuntu1.1
0.11.1-6ubuntu1.2
jpeg-xl
Ubuntu:26.04:LTS
 before 0.11.1-6ubuntu4.2, plus listed versions
0.11.1-40.11.1-6ubuntu10.11.1-6ubuntu30.11.1-6ubuntu4
0.11.1-6ubuntu4.2
libjxl
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 0.11.2-2.1
0.11.2-2.1
mozjs115
openSUSE:Tumbleweed
 before 115.15.0-9.1
115.15.0-9.1
mozjs140
openSUSE:Tumbleweed
 before 140.10.1-2.1
140.10.1-2.1
libjxl
openSUSE:Leap 16.0
 before 0.11.2-160000.2.1
0.11.2-160000.2.1
libjxl-gtk
openSUSE:Leap 16.0
 before 0.11.2-160000.2.1
0.11.2-160000.2.1
mozjs128
openSUSE:Leap 16.0
 before 128.14.0-160000.3.1
128.14.0-160000.3.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-70103 is a high vulnerability (CVSS 7.3) in libjxl, published May 27, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. Fixed in jpeg-xl 0.11.2-0.1~deb13u2.

References

Show 27 moreShow less
This page doesn't list everything

Left out here: 7 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open