CVE-2021-22563: Memory Overread in libjxl
Invalid JPEG XL images using libjxl can cause an out of bounds access on a std::vector<std::vector<T>> when rendering splines. The OOB read access can either lead to a segfault, or rendering splines based on other process memory. It is recommended to upgrade past 0.6.0 or patch with https://github.com/libjxl/libjxl/pull/757
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2021-22563?
CVE-2021-22563 is considered a high severity vulnerability due to potential segmentation faults and memory corruption.
How do I fix CVE-2021-22563?
To fix CVE-2021-22563, upgrade libjxl to a version past 0.6.0 or apply the appropriate patches.
What causes CVE-2021-22563?
CVE-2021-22563 is caused by invalid JPEG XL images leading to out of bounds access in libjxl.
Which software is affected by CVE-2021-22563?
CVE-2021-22563 affects libjxl versions up to and including 0.6.0.
What are the potential consequences of CVE-2021-22563?
The consequences of CVE-2021-22563 include application crashes and possible exposure of sensitive data from memory.