https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T17:05:35.397090+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/bdu:2026-09353 bdu:2026-09353 2026-10-01T17:05:35.912364+00:00 bdu:2026-09353 https://vulnerability.circl.lu/vuln/cve-2025-12474 CVE-2025-12474 — libjxl: Uninitialized memory read in decoder due to incorrect optimization in patch handling 2026-10-01T17:05:35.912465+00:00

Affected: Google libjxl

A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory.

This can be done by causing the decoder to reference an outside-image-bound area in a subsequent patches. An incorrect optimization causes the decoder to omit populating those areas.