cvedb.io
CVE-2023-35790
HIGH · CVSS 7.5
EPSS exploitation probability: 0%
Published 2023-06-16T21:15:09.420 · Last modified 2026-06-17T06:05:12.993

Summary

An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, such as an infinite loop.

Affected products

libjxl_project — libjxl

Does this affect you?

Add your gear to cvedb and we'll alert you only when libjxl_project ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.