CVE-2024-11403: Detailed Vulnerability Analysis and Overview

Status: Received - Published on 25-11-2024

Back to CVE Dashboard

CVE-2024-11403
Vulnerability Scoring

Analysis In Progress

Attack Complexity Details

  • Attack Complexity: Analysis in progress
  • Attack Vector: Analysis in progress
  • Privileges Required: Analysis in progress

CIA Impact Definition

  • Confidentiality:
  • Integrity:
  • Availability:

CVE-2024-11403 Vulnerability Summary

There exists an out of bounds read/write in LibJXL versions prior to commit 9cc451b91b74ba470fd72bd48c121e9f33d24c99. The JPEG decoder used by the JPEG XL encoder when doing JPEG recompression (i.e. if using JxlEncoderAddJPEGFrame on untrusted input) does not properly check bounds in the presence of incomplete codes. This could lead to an out-of-bounds write. In jpegli which is released as part of the same project, the same vulnerability is present. However, the relevant buffer is part of a bigger structure, and the code makes no assumptions on the values that could be overwritten. The issue could however cause jpegli to read uninitialised memory, or addresses of functions.

Access Complexity Graph for CVE-2024-11403

Impact Analysis for CVE-2024-11403

CVE-2024-11403: Detailed Information and External References

EPSS

0.00043

EPSS %

0.10788

References

0.00043

CWE

CWE-787

Protect Your Infrastructure: Combat Critical CVE Threats

Stay updated with real-time CVE vulnerabilities and take action to secure your systems. Enhance your cybersecurity posture with the latest threat intelligence and mitigation techniques. Develop the skills necessary to defend against CVEs and secure critical infrastructures. Advance your expertise with certifications like Certified Ethical Hacker (CEH) and CISSP ISC2. These certifications equip you with proactive strategies to address vulnerabilities and strengthen your organization's defenses against emerging cyber threats. Gain the tools and certifications to stay ahead of evolving CVE threats.

Join the top cybersecurity professionals safeguarding today's infrastructures.

Recently Published CVEs