libjxl: Out-of-bounds write in grayscale color transformation when using LCMS2

A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after that data from another uninitialized unallocated region is copied to pixel data. This can be done by requesting color transformation of grayscale images to another grayscale color space. Buffers allocated for 1-float-per-pixel are used as if they are allocated for 3-float-per-pixel. That happens only if LCMS2 is used as CMS engine. There is another CMS engine available (selected by build flags).

N/A

使用不正确的长度值访问缓冲区

libjxl 安全漏洞

libjxl是libjxl开源的一个 JPEG XL 图像格式参考实现。 libjxl存在安全漏洞，该漏洞源于解码器在处理特制文件时可能将像素数据写入未初始化的未分配内存，可能导致信息泄露。

N/A

N/A