CVE-2026-1837

Katalog CVE

CVSS 7.5 · High EPSS 0,32%

Kerentanan Buffer Access with Incorrect Length Value pada libjxl project libjxl. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after that data from another uninitialized unallocated region is copied to pixel data. This can be done by requesting color transformation of grayscale images to another grayscale color space. Buffers allocated for 1-float-per-pixel are used as if they are allocated for 3-float-per-pixel. That happens only if LCMS2 is used as CMS engine. There is another CMS engine available (selected by build flags).

Rincian

Terbit di NVD

11 Februari 2026

Terakhir diubah

15 Juli 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-805: Buffer Access with Incorrect Length Value
CWE-770: Allocation of Resources Without Limits or Throttling
CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,32% peluang dieksploitasi; lebih tinggi dari 22,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/libjxl/libjxl/issues/4549 exploit · issue tracking · patch
• https://access.redhat.com/security/cve/CVE-2026-1837
• https://bugzilla.redhat.com/show_bug.cgi?id=2438974
• https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1837.json