CVE-2023-0645
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk45th percentile - higher than 45% of all known CVEs
Summary
An out-of-bounds read vulnerability exists in libjxl. An attacker can cause an out-of-bounds read in the EXIF handler by using a specially crafted file.
Risk Assessment
The risk involves potential disclosure of sensitive memory data or application instability when processing a malicious image file with libjxl.
Recommendation
Upgrade libjxl to version 0.8.1 or apply the fix commit referenced in the CVE description immediately.
Other vulnerabilities in libjxl
See all- CVE-2026-82522Medium
In libjxl before 0.12, an integer underflow vulnerability exists in the container box parser that allows remote attackers to inject arbitrary metadata by exploiting 64-bit box size truncation to size_t on 32-bit platforms. Attackers can supply a crafted JPEG XL file causing the decoder to parse attacker-controlled codestream bytes as phantom box headers, enabling injection of arbitrary metadata (Exif, XMP, IPTC, JUMBF) and potential out-of-bounds reads.
- CVE-2026-52584High
Buffer overflow vulnerability in libjxl library version 0.11.2 and earlier in the DecodeImageAPNG function. A local attacker can exploit this to obtain sensitive information.
- CVE-2026-1837High
A specially crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory, and then data from another uninitialized region is copied to pixel data. This occurs during color transformation of grayscale images to another grayscale color space when using the LCMS2 CMS engine.
- CVE-2023-35790High
An issue was discovered in libjxl before version 0.8.2 in dec_patch_dictionary.cc. An integer underflow in patch decoding can lead to a denial of service, such as an infinite loop.
Original NVD description (English source)
An out of bounds read exists in libjxl. An attacker using a specifically crafted file could cause an out of bounds read in the exif handler. We recommend upgrading to version 0.8.1 or past commit https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159 https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159
Vulnerability data from NVD (NIST) · CISA KEV · EPSS