Vulnerability · Published Nov 1, 2021 · Assigned by Google

CVE-2021-22564Out of bounds Copy in Libjxl in large image groups

Medium 4.5

In plain English

A medium-severity heap buffer overflow in libjxl from Google LLC. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 24% of all known vulnerabilities).

Severity (CVSS 3.1)4.5Medium

Exploit odds (30 days)0.3%top 75.9% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

For certain valid JPEG XL images with a size slightly larger than an integer number of groups (256x256 pixels) when processing the groups out of order the decoder can perform an out of bounds copy of image pixels from an image buffer in the heap to another. This copy can occur when processing the right or bottom edges of the image, but only when groups are processed in certain order. Groups can be processed out of order in multi-threaded decoding environments with heavy thread load but also with images that contain the groups in an arbitrary order in the file. It is recommended to upgrade past 0.6.0 or patch with https://github.com/libjxl/libjxl/pull/775

Affected products (as reported)

Vendor	Product	Versions
Google LLC	libjxl	unspecified – through 0.6.0

Weakness: CWE-122 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

References

https://github.com/libjxl/libjxl/pull/775 x_refsource_MISC
https://github.com/libjxl/libjxl/issues/708 x_refsource_MISC