Unrated severityNVD Advisory· Published Jun 16, 2023· Updated Dec 17, 2024
CVE-2023-35790
CVE-2023-35790
Description
An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, such as an infinite loop.
Affected products
3- libjxl/libjxldescription
- osv-coords2 versionspkg:rpm/opensuse/libjxl&distro=openSUSE%20Leap%2015.5pkg:rpm/suse/libjxl&distro=SUSE%20Package%20Hub%2015%20SP5
< 0.8.2-bp155.2.3.1+ 1 more
- (no CPE)range: < 0.8.2-bp155.2.3.1
- (no CPE)range: < 0.8.2-bp155.2.3.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.