CVE-2026-52834: jxl-grid on 32-bit platforms has an out-of-bounds writes due to integer overflow

July 2, 2026

On 32-bit platforms, decoding a crafted image may lead to out-of-bounds writes due to integer overflow in length calculation.

References

github.com/advisories/GHSA-5pmv-rx8r-wmv5
github.com/tirr-c/jxl-oxide/security/advisories/GHSA-5pmv-rx8r-wmv5
nvd.nist.gov/vuln/detail/CVE-2026-52834
rustsec.org/advisories/RUSTSEC-2026-0151.html

Code Behaviors & Features

Detect and mitigate CVE-2026-52834 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →