Integer Overflow or Wraparound Affecting jxl-modular package, versions <0.11.3
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-RUST-JXLMODULAR-17808111
- published3 Jul 2026
- disclosed2 Jul 2026
- creditUnknown
Introduced: 2 Jul 2026
New CVE NOT AVAILABLE CWE-190 (opens in a new tab)Common Weakness Enumeration (CWE) is a category system for software weaknesses
How to fix?
Upgrade jxl-modular to version 0.11.3 or higher.
Overview
Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the decode_simple_table_slow function when processing a crafted JXL input with a specific MA tree structure. An attacker can cause a panic and crash the application by supplying specially crafted input data. This is only exploitable if overflow checks are enabled in the build configuration.