Denial of Service Vulnerability in libjxl by Google

CVE-2021-36691

What is CVE-2021-36691?

A vulnerability in libjxl, specifically in version 0.5.0, allows an attacker to exploit an assertion failure in the encoding process of malicious GIF files. By using the cjxl encoder, an attacker can trigger a denial of service, potentially leading to system instability and compromised performance. This issue highlights weaknesses in image processing functionalities that may be leveraged by threat actors to disrupt services.

References