CVE catalog
CVE-2025-70103
Heap buffer overflow vulnerability in libjxl 0.12.0…
Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras::DecodeImagePNM function in file lib/extras/dec/pnm.cc.
- Severity
- High · CVSS 8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.43% · Oct 27, 2026
Projects and upstream resources
Reported versions and fixes
Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.
Version impact has not been established. The original provider fields are retained below.
Provider details and historical evidence
Original provider fields
{
"package_releases": [
{
"name": "jpeg-xl",
"status": "fixed",
"release": "sid",
"version": "0.11.2-5.1"
},
{
"name": "jpeg-xl",
"status": "fixed",
"release": "forky",
"version": "0.11.2-5.1"
},
{
"name": "jpeg-xl",
"status": "fixed",
"release": "trixie",
"version": "0.11.2-0.1~deb13u2"
},
{
"name": "jpeg-xl",
"status": "fixed",
"release": "trixie-security",
"version": "0.11.2-0.1~deb13u3"
},
{
"name": "jpeg-xl",
"status": "vulnerable",
"release": "bookworm",
"version": "0.7.0-10+deb12u1"
},
{
"name": "jpeg-xl",
"status": "vulnerable",
"release": "bookworm-security",
"version": "0.7.0-10+deb12u1"
}
],
"fixed_versions": [
{
"bug": 1138575,
"name": "jpeg-xl",
"type": "source",
"origin": null,
"release": "sid",
"urgency": "not yet assigned",
"fixed_version": "0.11.2-5.1"
},
{
"bug": 1138575,
"name": "jpeg-xl",
"type": "source",
"origin": null,
"release": "forky",
"urgency": "not yet assigned",
"fixed_version": "0.11.2-5.1"
},
{
"bug": 1138575,
"name": "jpeg-xl",
"type": "source",
"origin": null,
"release": "trixie",
"urgency": "not yet assigned",
"fixed_version": "0.11.2-0.1~deb13u2"
},
{
"bug": 1138575,
"name": "jpeg-xl",
"type": "source",
"origin": null,
"release": "bookworm",
"urgency": "not yet assigned",
"fixed_version": ""
}
],
"distribution_packages": [
{
"name": "jpeg-xl",
"ecosystem": "cpe",
"fixed_version": "not yet fixed"
},
{
"name": "jpeg-xl",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.11.1-6ubuntu1.2"
}
]
}
],
"release": "25.10",
"versions": [
"0.11.1-4",
"0.11.1-6ubuntu1",
"0.11.1-6ubuntu1.1"
],
"ecosystem": "deb",
"fixed_version": "0.11.1-6ubuntu1.2",
"provider_record_id": "UBUNTU-CVE-2025-70103"
},
{
"name": "jpeg-xl",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.11.1-6ubuntu4.2"
}
]
}
],
"release": "26.04",
"versions": [
"0.11.1-4",
"0.11.1-6ubuntu1",
"0.11.1-6ubuntu3",
"0.11.1-6ubuntu4"
],
"ecosystem": "deb",
"fixed_version": "0.11.1-6ubuntu4.2",
"provider_record_id": "UBUNTU-CVE-2025-70103"
},
{
"name": "mozjs128",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "128.14.0-160000.3.1"
}
]
}
],
"release": "leap 16.0",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "128.14.0-160000.3.1",
"provider_record_id": "OPENSUSE-SU-2026:21114-1"
},
{
"name": "libjxl",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.11.2-160000.2.1"
}
]
}
],
"release": "leap 16.0",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "0.11.2-160000.2.1",
"provider_record_id": "OPENSUSE-SU-2026:21100-1"
},
{
"name": "libjxl-gtk",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.11.2-160000.2.1"
}
]
}
],
"release": "leap 16.0",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "0.11.2-160000.2.1",
"provider_record_id": "OPENSUSE-SU-2026:21100-1"
},
{
"name": "libjxl",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.11.2-160000.2.1"
}
]
}
],
"release": "linux enterprise server 16.0",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "0.11.2-160000.2.1",
"provider_record_id": "SUSE-SU-2026:22174-1"
},
{
"name": "libjxl",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.11.2-160000.2.1"
}
]
}
],
"release": "linux enterprise server for sap applications 16.0",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "0.11.2-160000.2.1",
"provider_record_id": "SUSE-SU-2026:22174-1"
},
{
"name": "mozjs128",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "128.14.0-160000.3.1"
}
]
}
],
"release": "linux enterprise server 16.0",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "128.14.0-160000.3.1",
"provider_record_id": "SUSE-SU-2026:22210-1"
},
{
"name": "mozjs128",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "128.14.0-160000.3.1"
}
]
}
],
"release": "linux enterprise server for sap applications 16.0",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "128.14.0-160000.3.1",
"provider_record_id": "SUSE-SU-2026:22210-1"
},
{
"name": "mozjs128",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "128.14.0-160000.3.1"
}
]
}
],
"release": "linux enterprise server 16.0",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "128.14.0-160000.3.1",
"provider_record_id": "SUSE-SU-2026:22201-1"
},
{
"name": "mozjs128",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "128.14.0-160000.3.1"
}
]
}
],
"release": "linux enterprise server for sap applications 16.0",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "128.14.0-160000.3.1",
"provider_record_id": "SUSE-SU-2026:22201-1"
},
{
"name": "jpeg-xl",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.11.1-6ubuntu1.2"
}
]
}
],
"release": "25.10",
"versions": [
"0.11.1-4",
"0.11.1-6ubuntu1",
"0.11.1-6ubuntu1.1"
],
"ecosystem": "deb",
"fixed_version": "0.11.1-6ubuntu1.2",
"provider_record_id": "USN-8397-1"
},
{
"name": "jpeg-xl",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.11.1-6ubuntu4.2"
}
]
}
],
"release": "26.04",
"versions": [
"0.11.1-4",
"0.11.1-6ubuntu1",
"0.11.1-6ubuntu3",
"0.11.1-6ubuntu4"
],
"ecosystem": "deb",
"fixed_version": "0.11.1-6ubuntu4.2",
"provider_record_id": "USN-8397-1"
},
{
"name": "mozjs140",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "140.10.1-2.1"
}
]
}
],
"release": "tumbleweed",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "140.10.1-2.1",
"provider_record_id": "OPENSUSE-SU-2026:10955-1"
},
{
"name": "mozjs115",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "115.15.0-9.1"
}
]
}
],
"release": "tumbleweed",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "115.15.0-9.1",
"provider_record_id": "OPENSUSE-SU-2026:10935-1"
}
]
}OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
[Debian 12 (Bookworm)]
- [jpeg-xl-doc]Unknown
Source package: [jpeg-xl]
Details (4)
0.7.0-10+deb12u1· all · bookwormAffected
nvd · jpeg-xl · debian · bookworm; nvd · jpeg-xl · debian · 12
0.7.0-10+deb12u1· all · bookwormAffected
nvd · jpeg-xl · debian · bookworm; nvd · jpeg-xl · debian · 12
0.7.0-10+deb12u1· all · bookworm-securityAffected
nvd · jpeg-xl · debian · bookworm; nvd · jpeg-xl · debian · 12
0.7.0-10+deb12u1· all · bookworm-securityAffected
nvd · jpeg-xl · debian · bookworm; nvd · jpeg-xl · debian · 12
- [libjpegxl-java]Unknown
Source package: [jpeg-xl]
Details (4)
0.7.0-10+deb12u1· amd64 · bookwormAffected
nvd · jpeg-xl · debian · bookworm; nvd · jpeg-xl · debian · 12
0.7.0-10+deb12u1· arm64 · bookwormAffected
nvd · jpeg-xl · debian · bookworm; nvd · jpeg-xl · debian · 12
0.7.0-10+deb12u1· amd64 · bookworm-securityAffected
nvd · jpeg-xl · debian · bookworm; nvd · jpeg-xl · debian · 12
0.7.0-10+deb12u1· arm64 · bookworm-securityAffected
nvd · jpeg-xl · debian · bookworm; nvd · jpeg-xl · debian · 12
- [libjxl0.7]Unknown
Source package: [jpeg-xl]
Details (4)
0.7.0-10+deb12u1· amd64 · bookwormAffected
nvd · jpeg-xl · debian · bookworm; nvd · jpeg-xl · debian · 12
0.7.0-10+deb12u1· arm64 · bookwormAffected
nvd · jpeg-xl · debian · bookworm; nvd · jpeg-xl · debian · 12
0.7.0-10+deb12u1· amd64 · bookworm-securityAffected
nvd · jpeg-xl · debian · bookworm; nvd · jpeg-xl · debian · 12
0.7.0-10+deb12u1· arm64 · bookworm-securityAffected
nvd · jpeg-xl · debian · bookworm; nvd · jpeg-xl · debian · 12
- [libjxl-dev]Unknown
Source package: [jpeg-xl]
Details (4)
0.7.0-10+deb12u1· amd64 · bookwormAffected
nvd · jpeg-xl · debian · bookworm; nvd · jpeg-xl · debian · 12
0.7.0-10+deb12u1· arm64 · bookwormAffected
nvd · jpeg-xl · debian · bookworm; nvd · jpeg-xl · debian · 12
0.7.0-10+deb12u1· amd64 · bookworm-securityAffected
nvd · jpeg-xl · debian · bookworm; nvd · jpeg-xl · debian · 12
0.7.0-10+deb12u1· arm64 · bookworm-securityAffected
nvd · jpeg-xl · debian · bookworm; nvd · jpeg-xl · debian · 12
- [libjxl-devtools]Unknown
Source package: [jpeg-xl]
Details (4)
0.7.0-10+deb12u1· amd64 · bookwormAffected
nvd · jpeg-xl · debian · bookworm; nvd · jpeg-xl · debian · 12
0.7.0-10+deb12u1· arm64 · bookwormAffected
nvd · jpeg-xl · debian · bookworm; nvd · jpeg-xl · debian · 12
0.7.0-10+deb12u1· amd64 · bookworm-securityAffected
nvd · jpeg-xl · debian · bookworm; nvd · jpeg-xl · debian · 12
0.7.0-10+deb12u1· arm64 · bookworm-securityAffected
nvd · jpeg-xl · debian · bookworm; nvd · jpeg-xl · debian · 12
- [libjxl-tools]Unknown
Source package: [jpeg-xl]
Details (4)
0.7.0-10+deb12u1· amd64 · bookwormAffected
nvd · jpeg-xl · debian · bookworm; nvd · jpeg-xl · debian · 12
0.7.0-10+deb12u1· arm64 · bookwormAffected
nvd · jpeg-xl · debian · bookworm; nvd · jpeg-xl · debian · 12
0.7.0-10+deb12u1· amd64 · bookworm-securityAffected
nvd · jpeg-xl · debian · bookworm; nvd · jpeg-xl · debian · 12
0.7.0-10+deb12u1· arm64 · bookworm-securityAffected
nvd · jpeg-xl · debian · bookworm; nvd · jpeg-xl · debian · 12
[Debian 13 (Trixie)]
- [jpeg-xl-doc]Unknown
Source package: [jpeg-xl]
Details (5)
0.11.2-0.1~deb13u2· all · trixieFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
0.11.2-0.1~deb13u2· all · trixieFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
0.11.2-0.1~deb13u2· all · trixie-security · Historical versionFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
0.11.2-0.1~deb13u2· all · trixie-securityFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
0.11.2-0.1~deb13u3· all · trixie-securityFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
- [libjpegxl-java]Unknown
Source package: [jpeg-xl]
Details (5)
0.11.2-0.1~deb13u2· amd64 · trixieFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
0.11.2-0.1~deb13u2· arm64 · trixieFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
0.11.2-0.1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
0.11.2-0.1~deb13u2· arm64 · trixie-securityFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
0.11.2-0.1~deb13u3· amd64 · trixie-securityFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
- [libjxl0.11]Unknown
Source package: [jpeg-xl]
Details (5)
0.11.2-0.1~deb13u2· amd64 · trixieFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
0.11.2-0.1~deb13u2· arm64 · trixieFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
0.11.2-0.1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
0.11.2-0.1~deb13u2· arm64 · trixie-securityFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
0.11.2-0.1~deb13u3· amd64 · trixie-securityFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
- [libjxl-dev]Unknown
Source package: [jpeg-xl]
Details (5)
0.11.2-0.1~deb13u2· amd64 · trixieFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
0.11.2-0.1~deb13u2· arm64 · trixieFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
0.11.2-0.1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
0.11.2-0.1~deb13u2· arm64 · trixie-securityFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
0.11.2-0.1~deb13u3· amd64 · trixie-securityFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
- [libjxl-devtools]Unknown
Source package: [jpeg-xl]
Details (5)
0.11.2-0.1~deb13u2· amd64 · trixieFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
0.11.2-0.1~deb13u2· arm64 · trixieFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
0.11.2-0.1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
0.11.2-0.1~deb13u2· arm64 · trixie-securityFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
0.11.2-0.1~deb13u3· amd64 · trixie-securityFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
- [libjxl-gdk-pixbuf]Unknown
Source package: [jpeg-xl]
Details (5)
0.11.2-0.1~deb13u2· amd64 · trixieFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
0.11.2-0.1~deb13u2· arm64 · trixieFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
0.11.2-0.1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
0.11.2-0.1~deb13u2· arm64 · trixie-securityFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
0.11.2-0.1~deb13u3· amd64 · trixie-securityFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
- [libjxl-tools]Unknown
Source package: [jpeg-xl]
Details (5)
0.11.2-0.1~deb13u2· amd64 · trixieFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
0.11.2-0.1~deb13u2· arm64 · trixieFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
0.11.2-0.1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
0.11.2-0.1~deb13u2· arm64 · trixie-securityFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
0.11.2-0.1~deb13u3· amd64 · trixie-securityFixed · Fixed:
0.11.2-0.1~deb13u2nvd · jpeg-xl · debian · 13
[openSUSE Tumbleweed]
- [libmozjs-140-0]Unknown
Source package: [mozjs140]
Details (1)
140.14.0-2.1· x86_64 · tumbleweedUnknown · Fixed:
140.10.1-2.1Version impact unknown
nvd · mozjs140 · opensuse · tumbleweed
- [mozjs140]Unknown
Source package: [mozjs140]
Details (1)
140.14.0-2.1· x86_64 · tumbleweedFixed · Fixed:
140.10.1-2.1nvd · mozjs140 · opensuse · tumbleweed
- [mozjs140-devel]Unknown
Source package: [mozjs140]
Details (1)
140.14.0-2.1· x86_64 · tumbleweedUnknown · Fixed:
140.10.1-2.1Version impact unknown
nvd · mozjs140 · opensuse · tumbleweed
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10910-1.json]
- [https://nvd.nist.gov/vuln/detail/CVE-2025-70103]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2025-70103]
- [https://osv.dev/vulnerability/SUSE-SU-2026:22174-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:22201-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:22210-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2025-70103]
- [https://osv.dev/vulnerability/USN-8397-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:10935-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:10955-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:21100-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:21114-1]
- [https://security-tracker.debian.org/tracker/CVE-2025-70103]
- [https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-70103.json]
[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]