Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory. This can be done by causing the decoder to reference an outside-image-bound area in a subsequent patches. An incorrect optimization causes the decoder to omit populating those areas.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2025-12474 Memory Corruption Vulnerability in libjxl Decoder via Uninitialized Memory Access https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-12474
Post summary
The text references CVE‑2025‑12474 as a memory corruption issue in libjxl Decoder, but offers no proof‑of‑concept, exploit, active exploitation, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | libjxl_project | libjxl | - | - | - |