CVE-2021-36692: Divide by Zero
Published Aug 30, 2021
·Updated
libjxl v0.3.7 is affected by a Divide By Zero in issue in lib/extras/codecapng.cc jxl::DecodeImageAPNG(). When encoding a malicous APNG file using cjxl, an attacker can trigger a denial of service.
Affected Software
1 affected component
Libjxl Project Libjxl=0.3.7
Remediation
Patch Available
Event History
Aug 30, 2021
CVE Published
via MITRE·08:14 PM
Data Sourced
via MITRE·08:14 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-36692?
CVE-2021-36692 has been classified with a severity rating indicating it can lead to denial of service.
2
How do I fix CVE-2021-36692?
To fix CVE-2021-36692, you should update libjxl to a later version that addresses this vulnerability.
3
What is the impact of exploiting CVE-2021-36692?
Exploiting CVE-2021-36692 can result in a denial of service condition when processing a malicious APNG file.
4
Which versions of libjxl are affected by CVE-2021-36692?
CVE-2021-36692 specifically affects libjxl version 0.3.7.
5
Can CVE-2021-36692 be triggered remotely?
Yes, CVE-2021-36692 can be triggered remotely by an attacker using a crafted APNG file.