Looks like the CIFuzz job failed for an unrelated reason (perhaps a build failure that needs fixing downstream in OSS Fuzz?).

[100%] Linking CXX shared library libjxl_extras_dec.so

It seems that libjxl builds shared libraries despite passing the -DBUILD_SHARED_LIBS=0 CMake option (since commit libjxl/libjxl@775d010).
https://github.com/libjxl/libjxl/blob/79d85890e7b409b4f76db019e2d0f8d21a354cb5/lib/jxl_extras.cmake#L176-L178

I'm preparing a PR to resolve this in libjxl. The latest libvips' OSS-Fuzz build also seems to fail due to this.
https://oss-fuzz-build-logs.storage.googleapis.com/index.html#libvips

PR libjxl/libjxl#1315 should fix the failing CIFuzz and OSS-Fuzz builds.

In exif load we do:

        image->Xres = VIPS_MAX( 0, xres );
        image->Yres = VIPS_MAX( 0, yres );

Perhaps the behaviour for vips load should be the same?

Thanks John, makes sense, I've updated to do so. This approach keeps things consistent with vips_image_init_fields too.

Great!