Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 19:27:08 +0000 bdu:2026-09353 https://vulnerability.circl.lu/vuln/bdu:2026-09353 bdu:2026-09353 https://vulnerability.circl.lu/vuln/bdu:2026-09353 CVE-2025-12474 — libjxl: Uninitialized memory read in decoder due to incorrect optimization in patch handling https://vulnerability.circl.lu/vuln/cve-2025-12474 <p><strong>Affected:</strong> Google libjxl</p> <p>A specially-crafted file can cause libjxl&#39;s decoder to read pixel data from uninitialized (but allocated) memory.</p> <p>This can be done by causing the decoder to reference an outside-image-bound area in a subsequent patches. An incorrect optimization causes the decoder to omit populating those areas.</p> <p><strong>Affected:</strong> Google libjxl</p> <p>A specially-crafted file can cause libjxl&#39;s decoder to read pixel data from uninitialized (but allocated) memory.</p> <p>This can be done by causing the decoder to reference an outside-image-bound area in a subsequent patches. An incorrect optimization causes the decoder to omit populating those areas.</p> https://vulnerability.circl.lu/vuln/cve-2025-12474