jxl-oxide: Out-of-bounds writes due to integer overflow in jxl-grid on 32-bit platforms

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-52834 · Microsoft / collected KEV context

EUVD-2026-62513

GHSA-5pmv-rx8r-wmv5

RUSTSEC-2026-0151

cve-program · CVE-2026-52834

• https://github.com/tirr-c/jxl-oxide/security/advisories/GHSA-5pmv-rx8r-wmv5
• https://github.com/tirr-c/jxl-oxide/commit/3986dadd3926a95656a642e74a0702d52f5c92e2
• https://github.com/tirr-c/jxl-oxide/releases/tag/0.12.6
• https://rustsec.org/advisories/RUSTSEC-2026-0151.html

euvd · EUVD-2026-62513

• https://github.com/tirr-c/jxl-oxide/security/advisories/GHSA-5pmv-rx8r-wmv5
• https://github.com/tirr-c/jxl-oxide/commit/3986dadd3926a95656a642e74a0702d52f5c92e2
• https://github.com/tirr-c/jxl-oxide/releases/tag/0.12.6
• https://rustsec.org/advisories/RUSTSEC-2026-0151.html

nvd · CVE-2026-52834

• https://github.com/tirr-c/jxl-oxide/commit/3986dadd3926a95656a642e74a0702d52f5c92e2
• https://github.com/tirr-c/jxl-oxide/releases/tag/0.12.6
• https://github.com/tirr-c/jxl-oxide/security/advisories/GHSA-5pmv-rx8r-wmv5
• https://rustsec.org/advisories/RUSTSEC-2026-0151.html

osv · GHSA-5pmv-rx8r-wmv5

• https://github.com/tirr-c/jxl-oxide/security/advisories/GHSA-5pmv-rx8r-wmv5
• https://github.com/tirr-c/jxl-oxide
• https://rustsec.org/advisories/RUSTSEC-2026-0151.html

osv · RUSTSEC-2026-0151

• https://crates.io/crates/jxl-grid
• https://rustsec.org/advisories/RUSTSEC-2026-0151.html
• https://github.com/tirr-c/jxl-oxide/commit/3986dadd3926a95656a642e74a0702d52f5c92e2

No related operational record is retained in the current change model.