CVE-2024-11498

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to 256mb is possible, maybe 512mb), potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend upgrading past commit 65fbec56bc578b6b6ee02a527be70787bbd053b0.

• CWE-400

• https://github.com/libjxl/libjxl/pull/3943Issue Tracking, Patch

Published

Nov 25, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-11492A vulnerability classified as problematic has been found in …6.1
• CVE-2024-11493A vulnerability classified as problematic was found in 115cm…6.1
• CVE-2024-11494**UNSUPPORTED WHEN ASSIGNED** The improper authentication vu…7.5
• CVE-2024-11495Buffer overflow vulnerability in OllyDbg, version 1.10, whic…7.8
• CVE-2024-11496The Infility Global plugin for WordPress is vulnerable to un…6.5
• CVE-2024-11497An authenticated attacker can use this vulnerability to perf…8.8
• CVE-2024-11499A vulnerability exists in RTU500 IEC 60870-4-104 controlled …6.9
• CVE-2024-1150Improper Verification of Cryptographic Signature vulnerabili…5.5
• CVE-2024-11501The Gallery plugin for WordPress is vulnerable to PHP Object…8.8
• CVE-2024-11502The Planning Center Online Giving WordPress plugin through 1…5.4
• CVE-2024-11503The WP Tabs WordPress plugin before 2.2.7 does not sanitise…6.1
• CVE-2024-11504Input from multiple fields in Streamsoft Prestiż is not sani…8.6