Known vulnerabilities in Google libjxl
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-12474 | A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory | 2.3 Low | Feb 11, 2026 |
| CVE-2026-1837 | A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory | 8.7 High | Feb 11, 2026 |