CVE-2023-0645

CRITICAL EPSS 45.3%
Published Apr 11, 20233y ago · Modified Jun 29, 20262d ago
9.1 CVSS 3.1
Critical
Find Similar
Published Apr 11, 2023 3y ago
Last Modified Jun 29, 2026 2d ago

Description

An out of bounds read exists in libjxl. An attacker using a specifically crafted file could cause an out of bounds read in the exif handler. We recommend upgrading to version 0.8.1 or past commit  https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159 https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159

CVSS Details

Base Score
9.1
Exploitability
3.9
Impact
5.2
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality High
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
45.3% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-125 Out-of-bounds Read Memory Safety

Affected Products 1

VendorProductVersionRange
libjxl_projectlibjxl* <0.8.1

References 3

  • openwall.com http://www.openwall.com/lists/oss-security/2026/06/29/3
  • github.com https://github.com/libjxl/libjxl/pull/2101
    Issue TrackingPatch
  • github.com https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159
    Patch

Remediation

  • github.com https://github.com/libjxl/libjxl/pull/2101
    Issue TrackingPatch
  • github.com https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159
    Patch