Divide By Zero Vulnerability in libjxl Affected by APNG Files
CVE-2021-36692

6.5MEDIUM

Key Information:

Vendor: Libjxl Project
Status: Libjxl
Vendor: CVE Published:; 30 August 2021

🔔 Create Libjxl Project Vulnerability Alert

What is CVE-2021-36692?

A vulnerability exists in libjxl v0.3.7 that can be exploited through a Divide By Zero issue in the jxl::DecodeImageAPNG() function found in the codec_apng.cc file. When malicious actors craft APNG files and encode them using cjxl, they can trigger a denial of service, impacting the application's availability and performance.