{"id":"OSV-2022-725","aliases":[],"status":"published","title":"Heap-buffer-overflow in jxl::N_EMU128::WriteToU8Stage::ProcessRow","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50295\n\n```\nCrash type: Heap-buffer-overflow WRITE 1\nCrash state:\njxl::N_EMU128::WriteToU8Stage::ProcessRow\njxl::LowMemoryRenderPipeline::RenderRect\njxl::LowMemoryRenderPipeline::ProcessBuffers\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2022-08-18T00:01:05.918943Z","modified":"2026-11-12T14:30:05Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"libjxl","ranges":[{"type":"GIT","events":[{"introduced":"a50e71631cabfbdd57d540ba080ecec19b4664af"}]}],"versions":["v0.8.0rc1","v0.8.0","v0.8.1","v0.9-snapshot","v0.8.2","v0.9.0","v0.9.1","v0.9.2","v0.10.0","v0.10-snapshot","v0.10.1","v0.10.2","v0.10.3","v0.8.3","v0.9.3","v0.11-snapshot","v0.11.0","v0.10.4","v0.11.1","v0.8.4","v0.9.4","v0.10.5","v0.11.2","v0.8.5","v0.9.5","v0.12-snapshot","v0.12.0","v0.13.0","v0.13-snapshot"]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50295","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2022-725","title":"Heap-buffer-overflow in jxl::N_EMU128::WriteToU8Stage::ProcessRow","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50295\n\n```\nCrash type: Heap-buffer-overflow WRITE 1\nCrash state:\njxl::N_EMU128::WriteToU8Stage::ProcessRow\njxl::LowMemoryRenderPipeline::RenderRect\njxl::LowMemoryRenderPipeline::ProcessBuffers\n```\n","status":"published","published":"2022-08-18T00:01:05.918943Z","modified":"2026-11-12T14:30:05.29915045Z","updated_at":"2026-11-12T14:53:12.263303Z"}]}}