jxrlib memory bugs in damaged JPEG XR files
Multiple memory-safety bugs can be triggered by damaged JPEG XR files. The maintained mircomir/jxrlib fork fixes them in version 1.4.4; older versions remain in several distributions and products.
Announced
Machine-extracted · Revision 1Original source
Evidence and details
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
All of them are fixed in public in the maintained fork github.com/mircomir/jxrlib (1.4.4, released 2026-10-09)
mircomir/jxrlib
the maintained fork github.com/mircomir/jxrlib
- Affected versions
- Not stated in this extraction
- Fixed versions
- 1.4.4
github.com/mircomir/jxrlib (1.4.4, released 2026-10-09)
- Prerequisites
- Not stated in this extraction
jxrlib
jxrlib, Microsoft's JPEG XR library
- Affected versions
- 1.2~git20170615.f752187-5.3
Debian's 1.2~git20170615.f752187-5.3
- Fixed versions
- Not stated in this extraction
- Prerequisites
- a damaged JPEG XR file
a damaged JPEG XR file of a few hundred bytes triggers
Publisher severity
No explicit severity was extracted.