The JXL encoder has an heap write overflow when a user specifies that the image should be encoded as 16 bit floats.
{
"severity": "MODERATE",
"cwe_ids": [
"CWE-122"
],
"nvd_published_at": "2026-04-13T22:16:29Z",
"github_reviewed_at": "2026-04-14T18:50:40Z",
"github_reviewed": true
}