Integer Overflow or Wraparound Affecting jxl-oxide package, versions <0.12.6
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-RUST-JXLOXIDE-17808085
- published3 Jul 2026
- disclosed2 Jul 2026
- creditUnknown
Introduced: 2 Jul 2026
New CVE NOT AVAILABLE CWE-131 (opens in a new tab)Common Weakness Enumeration (CWE) is a category system for software weaknesses
Common Weakness Enumeration (CWE) is a category system for software weaknesses
How to fix?
Upgrade jxl-oxide to version 0.12.6 or higher.
Overview
Affected versions of this package are vulnerable to Integer Overflow or Wraparound through the FrameBuffer::new function. An attacker can cause a panic and trigger undefined behavior by providing crafted input that leads to out-of-bounds slice creation and buffer overflows.