{"id":"CVE-2023-35790","aliases":["DEBIAN-CVE-2023-35790","DSA-5958-1","EUVD-2023-39787","GHSA-c693-jh58-c8cm","UBUNTU-CVE-2023-35790","USN-7637-1","openSUSE-SU-2023:0161-1"],"status":"published","title":"An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow...","description":"An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, such as an infinite loop.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00771,"percentile":0.5598,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-191"],"published":"2023-06-16T00:00:00Z","modified":"2026-10-28T02:30:53Z","fixes":[{"ecosystem":"Debian:12","package":"jpeg-xl","fixed_in":["0.7.0-10+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"jpeg-xl","fixed_in":["0.8.2-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"jpeg-xl","fixed_in":["0.8.2-4"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"jpeg-xl","fixed_in":["0.7.0-10.2ubuntu6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP5","package":"libjxl","fixed_in":["0.8.2-bp155.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"libjxl","fixed_in":["0.8.2-bp155.2.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"jpeg-xl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0-10+deb12u1"}]}],"versions":["0.7.0-10"]},{"source":"osv","ecosystem":"Debian:13","package":"jpeg-xl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.2-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"jpeg-xl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.2-4"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"jpeg-xl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0-10+deb12u1"}]}],"versions":["0.7.0-10"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"jpeg-xl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0-10.2ubuntu6.1"}]}],"versions":["0.7.0-10ubuntu2","0.7.0-10.2ubuntu1","0.7.0-10.2ubuntu4","0.7.0-10.2ubuntu5","0.7.0-10.2ubuntu6"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"jpeg-xl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0-10.2ubuntu6.1"}]}],"versions":["0.7.0-10ubuntu2","0.7.0-10.2ubuntu1","0.7.0-10.2ubuntu4","0.7.0-10.2ubuntu5","0.7.0-10.2ubuntu6"],"bundled":4},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP5","package":"libjxl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.2-bp155.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"libjxl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.2-bp155.2.3.1"}]}]}],"products":[{"vendor":"libjxl_project","product":"libjxl"}],"references":[{"url":"https://github.com/libjxl/libjxl/releases/tag/v0.8.2","tags":["x_transferred","Release Notes","web","report"]},{"url":"https://github.com/libjxl/libjxl/pull/2551","tags":["x_transferred","Patch","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-35790","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-c693-jh58-c8cm"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/35xxx/CVE-2023-35790.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-35790","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-35790","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-35790","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7637-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-0645","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-11403","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-11498","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/POMUDQH5YXS2RKRV7SGXIJ37BIK4ME5D/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1212492","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-35790","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-35790","description":"An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, such as an infinite loop.","status":"published","published":"2023-06-16T00:00:00Z","modified":"2024-12-17T17:02:35.491Z","updated_at":"2026-11-02T14:35:33.794347Z"}],"euvd":[{"id":"EUVD-2023-39787","description":"An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, such as an infinite loop.","status":"published","published":"2023-06-16T00:00:00Z","modified":"2024-12-17T17:02:35Z","updated_at":"2026-11-03T00:04:34.500778Z"}],"ghsa":[{"id":"GHSA-c693-jh58-c8cm","title":"An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow...","description":"An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, such as an infinite loop.","status":"published","published":"2023-06-16T21:30:27Z","modified":"2024-04-04T04:55:33Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-191"],"updated_at":"2026-11-02T14:56:28.408484Z"}],"nvd":[{"id":"CVE-2023-35790","description":"An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, such as an infinite loop.","status":"published","published":"2023-06-16T21:15:09.42Z","modified":"2026-06-17T06:05:12.993Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-191"],"updated_at":"2026-11-02T14:08:06.335469Z"}],"osv":[{"id":"DEBIAN-CVE-2023-35790","description":"An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, such as an infinite loop.","status":"published","published":"2023-06-16T21:15:09.42Z","modified":"2026-10-26T18:01:25.726937906Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:39.980321Z"},{"id":"UBUNTU-CVE-2023-35790","description":"An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, such as an infinite loop.","status":"published","published":"2023-06-16T21:15:00Z","modified":"2026-04-22T14:08:00.868076Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:21.882004Z"},{"id":"CVE-2023-35790","description":"An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, such as an infinite loop.","status":"published","published":"2023-06-16T00:00:00Z","modified":"2026-10-28T02:30:53.310354756Z","updated_at":"2026-11-02T15:44:32.510144Z"},{"id":"DSA-5958-1","title":"jpeg-xl - security update","status":"published","published":"2025-07-04T00:00:00Z","modified":"2026-03-09T02:08:56.665475Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"openSUSE-SU-2023:0161-1","title":"Security update for libjxl","description":"This update for libjxl fixes the following issues:\n\nUpdate to release 0.8.2\n\n* CVE-2023-35790: Fix an integer underflow bug in patch decoding. (bsc#1212492)\n","status":"published","published":"2023-06-29T14:01:28Z","modified":"2026-02-04T02:22:59.430604Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"USN-7637-1","title":"jpeg-xl vulnerabilities","description":"It was discovered that libjxl did not perform proper bounds checking\nwhen parsing Exif tags. An attacker could possibly use this issue to\ncause libjxl to crash, resulting in a denial of service. (CVE-2023-0645)\n\nIt was discovered that libjxl did not perform proper bounds checking \nwhen decoding patches. An attacker could possibly use this issue to\ncause libjxl to enter an infinite loop, resulting in a denial of \nservice. (CVE-2023-35790)\n\nIt was discovered that libjxl did not perform proper bounds checking\nwhen performing JPEG recompression. An attacker could possibly use this\nissue to cause libjxl to crash, resulting in a denial of service, or\npossibly execute arbitrary code. (CVE-2024-11403)\n\nIt was discovered that libjxl incorrectly handled parsing certain image\nfiles. An attacker could possibly use this issue to cause libjxl to \nconsume excessive amounts of memory, resulting in a denial of service.\n(CVE-2024-11498)","status":"published","published":"2025-07-14T16:31:56Z","modified":"2026-04-22T11:00:54.50932Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}