medium5.3
CVE-2023-0645
An out of bounds read exists in libjxl.
Impact
An out of bounds read exists in libjxl. An attacker using a specifically crafted file could cause an out of bounds read in the exif handler. We recommend upgrading to version 0.8.1 or past commit https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159 https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Libjxl Project | Libjxl | before 0.8.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/libjxl/libjxl/pull/2101
- https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159
- http://www.openwall.com/lists/oss-security/2026/06/29/3
- https://github.com/libjxl/libjxl/pull/2101
- https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159