rpm package
opensuse/mozjs115&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/mozjs115&distro=openSUSE%20Tumbleweed
Vulnerabilities (11)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2025-70103 | Hig | 7.3 | < 115.15.0-9.1 | 115.15.0-9.1 | May 27, 2026 | Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras::DecodeImagePNM function in file lib/extras/dec/pnm.cc. | |
| CVE-2026-32778 | — | < 115.15.0-8.1 | 115.15.0-8.1 | Mar 16, 2026 | libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition. | ||
| CVE-2026-32777 | — | < 115.15.0-8.1 | 115.15.0-8.1 | Mar 16, 2026 | libexpat before 2.7.5 allows an infinite loop while parsing DTD content. | ||
| CVE-2026-32776 | — | < 115.15.0-8.1 | 115.15.0-8.1 | Mar 16, 2026 | libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content. | ||
| CVE-2024-56431 | — | < 115.15.0-5.1 | 115.15.0-5.1 | Dec 25, 2024 | oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift. NOTE: this is disputed by third parties because there is no evidence of a security impact, e.g., an application would not crash. | ||
| CVE-2024-11403 | — | < 115.15.0-4.1 | 115.15.0-4.1 | Nov 25, 2024 | There exists an out of bounds read/write in LibJXL versions prior to commit 9cc451b91b74ba470fd72bd48c121e9f33d24c99. The JPEG decoder used by the JPEG XL encoder when doing JPEG recompression (i.e. if using JxlEncoderAddJPEGFrame on untrusted input) does not properly check bound | ||
| CVE-2024-11498 | — | < 115.15.0-4.1 | 115.15.0-4.1 | Nov 25, 2024 | There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to 256mb is possible, maybe 512mb), potentially exhausting the stack. An attacker can craft a file that will cause excessive memory us | ||
| CVE-2024-50602 | — | < 115.15.0-3.1 | 115.15.0-3.1 | Oct 27, 2024 | An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser. | ||
| CVE-2024-45492 | Cri | 9.8 | < 115.4.0-5.1 | 115.4.0-5.1 | Aug 30, 2024 | An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX). | |
| CVE-2024-45491 | Cri | 9.8 | < 115.4.0-5.1 | 115.4.0-5.1 | Aug 30, 2024 | An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms (where UINT_MAX equals SIZE_MAX). | |
| CVE-2024-45490 | Hig | 7.5 | < 115.4.0-5.1 | 115.4.0-5.1 | Aug 30, 2024 | An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer. |
- affected < 115.15.0-9.1fixed 115.15.0-9.1
Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras::DecodeImagePNM function in file lib/extras/dec/pnm.cc.
- CVE-2026-32778Mar 16, 2026affected < 115.15.0-8.1fixed 115.15.0-8.1
libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition.
- CVE-2026-32777Mar 16, 2026affected < 115.15.0-8.1fixed 115.15.0-8.1
libexpat before 2.7.5 allows an infinite loop while parsing DTD content.
- CVE-2026-32776Mar 16, 2026affected < 115.15.0-8.1fixed 115.15.0-8.1
libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.
- CVE-2024-56431Dec 25, 2024affected < 115.15.0-5.1fixed 115.15.0-5.1
oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift. NOTE: this is disputed by third parties because there is no evidence of a security impact, e.g., an application would not crash.
- CVE-2024-11403Nov 25, 2024affected < 115.15.0-4.1fixed 115.15.0-4.1
There exists an out of bounds read/write in LibJXL versions prior to commit 9cc451b91b74ba470fd72bd48c121e9f33d24c99. The JPEG decoder used by the JPEG XL encoder when doing JPEG recompression (i.e. if using JxlEncoderAddJPEGFrame on untrusted input) does not properly check bound
- CVE-2024-11498Nov 25, 2024affected < 115.15.0-4.1fixed 115.15.0-4.1
There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to 256mb is possible, maybe 512mb), potentially exhausting the stack. An attacker can craft a file that will cause excessive memory us
- CVE-2024-50602Oct 27, 2024affected < 115.15.0-3.1fixed 115.15.0-3.1
An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.
- affected < 115.4.0-5.1fixed 115.4.0-5.1
An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX).
- affected < 115.4.0-5.1fixed 115.4.0-5.1
An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms (where UINT_MAX equals SIZE_MAX).
- affected < 115.4.0-5.1fixed 115.4.0-5.1
An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer.