It was discovered that missing input sanitising in the APNG parser in the reference code implementation of the JPEG XL format could result in denial of service or information disclosure if malformed images are processed. https://security-tracker.debian.org/tracker/DSA-6564-1