CVE-2023-35790: Integer Underflow
Published Jun 16, 2023
·Updated
An issue was discovered in decpatchdictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, such as an infinite loop.
Affected Software
1 affected component
Libjxl Project Libjxl<0.8.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
libjxlto a version that resolves this vulnerability.Fixed in 0.8.2
Event History
Jun 16, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-35790?
CVE-2023-35790 is classified as a denial of service vulnerability due to an integer underflow in libjxl.
2
How do I fix CVE-2023-35790?
To fix CVE-2023-35790, update libjxl to version 0.8.2 or later.
3
What causes the denial of service in CVE-2023-35790?
CVE-2023-35790 causes denial of service through an integer underflow during patch decoding.
4
Which versions of libjxl are affected by CVE-2023-35790?
CVE-2023-35790 affects all versions of libjxl prior to 0.8.2.
5
Can CVE-2023-35790 lead to security repercussions?
Yes, CVE-2023-35790 can lead to an infinite loop, resulting in a denial of service condition.