OSV-2022-608
Heap-use-after-free in jxl::WriteToPixelCallbackStage::ProcessRow
No score
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49277
Crash type: Heap-use-after-free READ 4
Crash state:
jxl::WriteToPixelCallbackStage::ProcessRow
jxl::LowMemoryRenderPipeline::RenderRect
jxl::LowMemoryRenderPipeline::ProcessBuffers
What each source reports
OSV No score
Heap-use-after-free in jxl::WriteToPixelCallbackStage::ProcessRow
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49277
Crash type: Heap-use-after-free READ 4
Crash state:
jxl::WriteToPixelCallbackStage::ProcessRow
jxl::LowMemoryRenderPipeline::RenderRect
jxl::LowMemoryRenderPipeline::ProcessBuffers
- Record
OSV-2022-608- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libjxlOSS-Fuzz |
Listed versions, plus commit ranges v0.7-basev0.7rcv0.7.0v1.0-snapshotv0.8-snapshot Show 30 moreShow lessv0.8.0rc1v0.8.0v0.8.1v0.9-snapshotv0.8.2v0.9.0v0.9.1v0.9.2v0.10.0v0.10-snapshotv0.10.1v0.10.2v0.10.3v0.8.3v0.9.3v0.7.1v0.11-snapshotv0.11.0v0.10.4v0.11.1v0.8.4v0.9.4v0.7.2v0.7.3v0.10.5v0.11.2v0.8.5v0.9.5v0.12-snapshotv0.12.0 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2022-608 is a vulnerability with no CVSS score yet in libjxl, published July 21, 2022. No source lists public exploit code. No source names a fixed version.