An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, such as an infinite loop.
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libjxl | Libjxl_project | * | 0.8.2 (excluding) |
| Jpeg-xl | Ubuntu | bionic | * |
| Jpeg-xl | Ubuntu | lunar | * |
| Jpeg-xl | Ubuntu | mantic | * |
| Jpeg-xl | Ubuntu | trusty | * |
| Jpeg-xl | Ubuntu | xenial | * |