High severity7.5NVD Advisory· Published Jun 16, 2023· Updated Jun 17, 2026
CVE-2023-35790
CVE-2023-35790
Description
An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, such as an infinite loop.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- libjxl/libjxldescription
<0.8.2+ 1 more
- (no CPE)range: <0.8.2
- cpe:2.3:a:libjxl_project:libjxl:*:*:*:*:*:*:*:*range: <0.8.2
- osv-coords2 versionspkg:rpm/suse/libjxl&distro=SUSE%20Package%20Hub%2015%20SP5pkg:rpm/opensuse/libjxl&distro=openSUSE%20Leap%2015.5
< 0.8.2-bp155.2.3.1+ 1 more
- (no CPE)range: < 0.8.2-bp155.2.3.1
- (no CPE)range: < 0.8.2-bp155.2.3.1
Patches
Vulnerability mechanics
References
2- github.com/libjxl/libjxl/pull/2551nvdPatch
- github.com/libjxl/libjxl/releases/tag/v0.8.2nvdRelease Notes
News mentions
0No linked articles in our index yet.