CVE-2024-11403

CVE-2024-11403 is a critical out-of-bounds read/write vulnerability affecting LibJXL versions prior to commit 9cc451b91b74ba470fd72bd48c121e9f33d24c99, specifically within its JPEG decoder during recompression of untrusted input. This flaw, also present in jpegli, could lead to arbitrary code execution, denial of service, or information disclosure due to uninitialized memory reads or function address overwrites. With a CVSS score of 9.8 (Critical), it is network-exploitable with low attack complexity and no user interaction required, allowing for high impact on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.