These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-82522 is an integer underflow vulnerability in libjxl before version 0.12. The vulnerability occurs in the container box parser and allows remote attackers to inject arbitrary metadata by exploiting 64-bit box size truncation to size_t on 32-bit platforms. This issue can lead to potential out-of-bounds reads when parsing crafted JPEG XL files.
A buffer overflow vulnerability exists in libjxl version 0.11.2 and earlier. The vulnerability is in the DecodeImageAPNG function and could allow a local attacker to obtain sensitive information. This vulnerability may impact users of libjxl in various environments, including web applications and image processing systems. The affected product is widely used for image compression and processing. Users shou [truncated]
A heap buffer overflow vulnerability exists in libjxl 0.12.0, triggered when processing crafted PBM images through the jxl::extras::DecodeImagePNM function in lib/extras/dec/pnm.cc. The vulnerability was published to CVE on 2026-05-27 and carries a HIGH severity CVSS 3.1 score of 7.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L). The issue was reported via GitHub issue and subsequently addressed through a pull re [truncated]