CVE-2026-52584

Received Received - Intake

Buffer Overflow in libjxl via DecodeImageAPNG

Publication date: 2026-07-17

Last updated on: 2026-07-17

Assigner: MITRE

Description

Buffer Overflow vulnerability in libjxl v.0.11.2 and before allows a local attacker to obtain sensitive information via the DecodeImageAPNG function

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-17

Last Modified

2026-07-17

Generated

2026-07-18

AI Q&A

2026-07-18

EPSS Evaluated

N/A

NVD

CVE-2026-52584

Affected Vendors & Products

Vendor	Product	Version / Range
libjxl	libjxl	to 0.11.2 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a buffer overflow in libjxl versions 0.11.2 and earlier. It occurs in the DecodeImageAPNG function, allowing a local attacker to potentially access sensitive information due to improper memory handling.

Impact Analysis

A local attacker could exploit this to obtain sensitive data from memory, potentially leading to information disclosure. This may include credentials or other confidential information processed by the affected software.

Compliance Impact

This vulnerability could lead to unauthorized data access, violating GDPR's data protection principles or HIPAA's confidentiality requirements. Organizations using affected libjxl versions may face compliance risks due to potential data breaches.

Mitigation Strategies

Update libjxl to a version later than 0.11.2 to address the buffer overflow vulnerability in DecodeImageAPNG function.

Hi! I’m here to help you understand CVE-2026-52584. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70