Buffer Overflow Vulnerability in libjxl Software from Libjxl

CVE-2026-52584

What is CVE-2026-52584?

A buffer overflow vulnerability exists in libjxl versions up to and including v0.11.2, which can be exploited by a local attacker. The flaw is particularly concerning as it allows unauthorized access to sensitive information via the DecodeImageAPNG function. By manipulating the input data, an attacker can potentially exploit this weakness to gain access to confidential data, posing a risk to user privacy and system integrity. It is imperative for users to be aware of this vulnerability to take the necessary precautions.

References