CVE-2021-36691

Published: Aug 30, 2021Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

libjxl v0.5.0 is affected by a Assertion failed issue in lib/jxl/image.cc jxl::PlaneBase::PlaneBase(). When encoding a malicous GIF file using cjxl, an attacker can trigger a denial of service.

Affected (1)

Products: Libjxl Project: Libjxl

Libjxl Project

1 product

Libjxl

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Libjxl Project Libjxl	Version 0.5.0

Related CWEs

CWE-617

Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

References (2)

https://github.com/libjxl/libjxl/issues/422

Source: cve@mitre.org

ExploitIssue TrackingThird Party Advisory

https://github.com/libjxl/libjxl/issues/422

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingThird Party Advisory

Timeline

No history available yet.