What’s Vulnerable › Products

libjxl vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your libjxl version is affected

Latest libjxl vulnerabilities

• CVE-2026-82522 — libjxl < 0.12.0 Container Box Parser Integer Underflow via 32-bit Size Truncation (CVSS 5.4)
• CVE-2026-1837 — libjxl: Out-of-bounds write in grayscale color transformation when using LCMS2 (CVSS 7.5)
• CVE-2025-12474 — libjxl: Uninitialized memory read in decoder due to incorrect optimization in patch handling (CVSS 4.4)
• CVE-2024-11498 — Resource exhaustion via Stack overflow in libjxl (CVSS 7.5)
• CVE-2024-11403 — Out of Bounds Memory Read/Write in libjxl (CVSS 9.8)
• CVE-2023-35790 — (CVSS 7.5)
• CVE-2023-0645 — Out of Bounds read in libjxl (CVSS 9.1)
• CVE-2022-34000 — (CVSS 6.5)
• CVE-2021-45928 — (CVSS 5.5)
• CVE-2021-22564 — Out of bounds Copy in Libjxl in large image groups (CVSS 5.5)
• CVE-2021-22563 — Memory Overread in libjxl (CVSS 4.4)
• CVE-2021-36692 — (CVSS 6.5)
• CVE-2021-36691 — (CVSS 7.5)
• CVE-2021-27804 — (CVSS 9.8)