Vulnerability-Lookup

ubuntu-cve-2024-11498

Vulnerability from osv_ubuntu

Published

2024-11-25 14:15

Modified

2026-04-22 07:47

Summary

Details

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to 256mb is possible, maybe 512mb), potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend upgrading past commit 65fbec56bc578b6b6ee02a527be70787bbd053b0.

Severity

6.9 (Medium)


                    
                      CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H

7.5 (High)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2024-11498	REPORT
	https://www.cve.org/CVERecord?id=CVE-2024-11498	REPORT
	https://ubuntu.com/security/notices/USN-7637-1	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libjpegxl-java",
            "binary_version": "0.7.0-10.2ubuntu6.1"
          },
          {
            "binary_name": "libjxl-devtools",
            "binary_version": "0.7.0-10.2ubuntu6.1"
          },
          {
            "binary_name": "libjxl-tools",
            "binary_version": "0.7.0-10.2ubuntu6.1"
          },
          {
            "binary_name": "libjxl0.7",
            "binary_version": "0.7.0-10.2ubuntu6.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "jpeg-xl",
        "purl": "pkg:deb/ubuntu/jpeg-xl@0.7.0-10.2ubuntu6.1?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.7.0-10.2ubuntu6.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.7.0-10ubuntu2",
        "0.7.0-10.2ubuntu1",
        "0.7.0-10.2ubuntu4",
        "0.7.0-10.2ubuntu5",
        "0.7.0-10.2ubuntu6"
      ]
    }
  ],
  "aliases": [],
  "details": "There exists a stack buffer overflow in libjxl.\u00a0A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to 256mb is possible, maybe 512mb), potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend upgrading past commit\u00a065fbec56bc578b6b6ee02a527be70787bbd053b0.",
  "id": "UBUNTU-CVE-2024-11498",
  "modified": "2026-04-22T07:47:57Z",
  "published": "2024-11-25T14:15:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-11498"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-11498"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-7637-1"
    }
  ],
  "related": [
    "USN-7637-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H",
      "type": "CVSS_V4"
    },
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2024-11498"
  ]
}

CVE-2024-11498 (GCVE-0-2024-11498)

Vulnerability from cvelistv5 – Published: 2024-11-25 13:08 – Updated: 2024-11-25 13:55

Title

Resource exhaustion via Stack overflow in libjxl

Summary

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-400 - Uncontrolled Resource Consumption

Assigner

Google

References

1 reference

URL	Tags
https://github.com/libjxl/libjxl/pull/3943

Impacted products

1 product

Vendor	Product	Version
libjxl	libjxl	Affected: 0.11.0 , < 65fbec56bc578b6b6ee02a527be70787bbd053b0 (custom) Affected: 0.10.0-2 , < 65fbec56bc578b6b6ee02a527be70787bbd053b0 (custom) Affected: 0.9.0-3 , < 65fbec56bc578b6b6ee02a527be70787bbd053b0 (custom) Affected: 0.8.0-3 , < 65fbec56bc578b6b6ee02a527be70787bbd053b0 (custom) Affected: 0.7.0-1 , < 65fbec56bc578b6b6ee02a527be70787bbd053b0 (custom)

Date Public

2024-11-20 23:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-11498",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-25T13:54:57.173166Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-25T13:55:13.205Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://github.com/libjxl/libjxl/",
          "defaultStatus": "unaffected",
          "product": "libjxl",
          "programFiles": [
            "lib/jxl/modular/encoding/dec_ma.cc"
          ],
          "repo": "https://github.com/libjxl/libjxl/",
          "vendor": "libjxl",
          "versions": [
            {
              "lessThan": "65fbec56bc578b6b6ee02a527be70787bbd053b0",
              "status": "affected",
              "version": "0.11.0",
              "versionType": "custom"
            },
            {
              "lessThan": "65fbec56bc578b6b6ee02a527be70787bbd053b0",
              "status": "affected",
              "version": "0.10.0-2",
              "versionType": "custom"
            },
            {
              "lessThan": "65fbec56bc578b6b6ee02a527be70787bbd053b0",
              "status": "affected",
              "version": "0.9.0-3",
              "versionType": "custom"
            },
            {
              "lessThan": "65fbec56bc578b6b6ee02a527be70787bbd053b0",
              "status": "affected",
              "version": "0.8.0-3",
              "versionType": "custom"
            },
            {
              "lessThan": "65fbec56bc578b6b6ee02a527be70787bbd053b0",
              "status": "affected",
              "version": "0.7.0-1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2024-11-20T23:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "There exists a stack buffer overflow in libjxl.\u0026nbsp;\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eA specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to 256mb is possible, maybe 512mb), potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend upgrading past commit\u0026nbsp;65fbec56bc578b6b6ee02a527be70787bbd053b0.\u0026nbsp;\u003c/span\u003e\u003cbr\u003e"
            }
          ],
          "value": "There exists a stack buffer overflow in libjxl.\u00a0A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to 256mb is possible, maybe 512mb), potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend upgrading past commit\u00a065fbec56bc578b6b6ee02a527be70787bbd053b0."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-100",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-100 Overflow Buffers"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400 Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-25T13:08:07.140Z",
        "orgId": "14ed7db2-1595-443d-9d34-6215bf890778",
        "shortName": "Google"
      },
      "references": [
        {
          "url": "https://github.com/libjxl/libjxl/pull/3943"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Resource exhaustion via Stack overflow in libjxl",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "14ed7db2-1595-443d-9d34-6215bf890778",
    "assignerShortName": "Google",
    "cveId": "CVE-2024-11498",
    "datePublished": "2024-11-25T13:08:07.140Z",
    "dateReserved": "2024-11-20T13:03:15.355Z",
    "dateUpdated": "2024-11-25T13:55:13.205Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

usn-7637-1

Vulnerability from osv_ubuntu

Published

2025-07-14 16:31

Modified

2026-04-22 07:37

Summary

jpeg-xl vulnerabilities

Details

It was discovered that libjxl did not perform proper bounds checking when parsing Exif tags. An attacker could possibly use this issue to cause libjxl to crash, resulting in a denial of service. (CVE-2023-0645)

It was discovered that libjxl did not perform proper bounds checking when decoding patches. An attacker could possibly use this issue to cause libjxl to enter an infinite loop, resulting in a denial of service. (CVE-2023-35790)

It was discovered that libjxl did not perform proper bounds checking when performing JPEG recompression. An attacker could possibly use this issue to cause libjxl to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2024-11403)

It was discovered that libjxl incorrectly handled parsing certain image files. An attacker could possibly use this issue to cause libjxl to consume excessive amounts of memory, resulting in a denial of service. (CVE-2024-11498)

References

URL

Type

	https://ubuntu.com/security/notices/USN-7637-1	ADVISORY
	https://ubuntu.com/security/CVE-2023-0645	REPORT
	https://ubuntu.com/security/CVE-2023-35790	REPORT
	https://ubuntu.com/security/CVE-2024-11403	REPORT
	https://ubuntu.com/security/CVE-2024-11498	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2023-0645",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-35790",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-11403",
              "severity": [
                {
                  "score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-11498",
              "severity": [
                {
                  "score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H",
                  "type": "CVSS_V4"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:24.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libjpegxl-java",
            "binary_version": "0.7.0-10.2ubuntu6.1"
          },
          {
            "binary_name": "libjxl-devtools",
            "binary_version": "0.7.0-10.2ubuntu6.1"
          },
          {
            "binary_name": "libjxl-tools",
            "binary_version": "0.7.0-10.2ubuntu6.1"
          },
          {
            "binary_name": "libjxl0.7",
            "binary_version": "0.7.0-10.2ubuntu6.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "jpeg-xl",
        "purl": "pkg:deb/ubuntu/jpeg-xl@0.7.0-10.2ubuntu6.1?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.7.0-10.2ubuntu6.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.7.0-10ubuntu2",
        "0.7.0-10.2ubuntu1",
        "0.7.0-10.2ubuntu4",
        "0.7.0-10.2ubuntu5",
        "0.7.0-10.2ubuntu6"
      ]
    }
  ],
  "aliases": [],
  "details": "It was discovered that libjxl did not perform proper bounds checking\nwhen parsing Exif tags. An attacker could possibly use this issue to\ncause libjxl to crash, resulting in a denial of service. (CVE-2023-0645)\n\nIt was discovered that libjxl did not perform proper bounds checking \nwhen decoding patches. An attacker could possibly use this issue to\ncause libjxl to enter an infinite loop, resulting in a denial of \nservice. (CVE-2023-35790)\n\nIt was discovered that libjxl did not perform proper bounds checking\nwhen performing JPEG recompression. An attacker could possibly use this\nissue to cause libjxl to crash, resulting in a denial of service, or\npossibly execute arbitrary code. (CVE-2024-11403)\n\nIt was discovered that libjxl incorrectly handled parsing certain image\nfiles. An attacker could possibly use this issue to cause libjxl to \nconsume excessive amounts of memory, resulting in a denial of service.\n(CVE-2024-11498)",
  "id": "USN-7637-1",
  "modified": "2026-04-22T07:37:22Z",
  "published": "2025-07-14T16:31:56Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-7637-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-0645"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-35790"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-11403"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-11498"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "jpeg-xl vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2023-0645",
    "UBUNTU-CVE-2023-35790",
    "UBUNTU-CVE-2024-11403",
    "UBUNTU-CVE-2024-11498"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

ubuntu-cve-2024-11498

Vulnerability from osv_ubuntu

CVE-2024-11498 (GCVE-0-2024-11498)

usn-7637-1

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature