crates.io/jxl-grid CVE-2026-52834: high 7.3, EPSS 0.17%

jxl-grid on 32-bit platforms has an out-of-bounds writes due to integer overflow

Action: Upgrade jxl-grid to 0.6.2 or later.

cargo update -p jxl-grid --precise 0.6.2

Affected

Fixed versions

Sources

• osv: GHSA-5pmv-rx8r-wmv5
• https://github.com/tirr-c/jxl-oxide/security/advisories/GHSA-5pmv-rx8r-wmv5
• https://github.com/tirr-c/jxl-oxide
• https://rustsec.org/advisories/RUSTSEC-2026-0151.html

CVE-2026-52834 · published 2026-07-02T20:45:59Z · modified 2026-07-02T21:11:21.211631010Z · JSON