CVE-2023-0645 - Out of Bounds read in libjxl

CRITICAL

Out of Bounds read in libjxl

Published Apr 11, 2023

9.1

CRITICAL

CVSS 3.1

EPSS 0.85%

An out of bounds read exists in libjxl. An attacker using a specifically crafted file could cause an out of bounds read in the exif handler. We recommend upgrading to version 0.8.1 or past commit https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159 https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
0.7.0	affected	<0.8.1

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

Link	Providers	Tags
http://www.openwall.com/lists/oss-security/2026/06/29/3
https://github.com/libjxl/libjxl/pull/2101		Issue TrackingPatch
https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159		Patch

No recorded changes yet.

Sources

Status PUBLISHED

Assigner Google

Published Apr 11, 2023

Updated Jun 29, 2026

Reserved Feb 2, 2023

Updated Feb 7, 2025

Status Modified

Modified Jun 29, 2026

Severity n/a

Public date n/a