{"id":"CVE-2023-0645","aliases":["DEBIAN-CVE-2023-0645","DSA-5958-1","EUVD-2023-12679","GHSA-378h-jm2h-7wrm","UBUNTU-CVE-2023-0645","USN-7637-1"],"status":"published","title":"Out of Bounds read in libjxl","description":"An out of bounds read exists in libjxl. An attacker using a specifically crafted file could cause an out of bounds read in the exif handler. We recommend upgrading to version 0.8.1 or past commit  https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159 https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00854,"percentile":0.5858,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2023-04-11T13:22:06Z","modified":"2026-10-28T02:31:02Z","fixes":[{"ecosystem":"Debian:12","package":"jpeg-xl","fixed_in":["0.7.0-10+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"jpeg-xl","fixed_in":["0.8.2-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"jpeg-xl","fixed_in":["0.8.2-4"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"jpeg-xl","fixed_in":["0.7.0-10.2ubuntu6.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"jpeg-xl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0-10+deb12u1"}]}],"versions":["0.7.0-10"]},{"source":"osv","ecosystem":"Debian:13","package":"jpeg-xl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.2-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"jpeg-xl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.2-4"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"jpeg-xl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0-10+deb12u1"}]}],"versions":["0.7.0-10"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"jpeg-xl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0-10.2ubuntu6.1"}]}],"versions":["0.7.0-10ubuntu2","0.7.0-10.2ubuntu1","0.7.0-10.2ubuntu4","0.7.0-10.2ubuntu5","0.7.0-10.2ubuntu6"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"jpeg-xl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0-10.2ubuntu6.1"}]}],"versions":["0.7.0-10ubuntu2","0.7.0-10.2ubuntu1","0.7.0-10.2ubuntu4","0.7.0-10.2ubuntu5","0.7.0-10.2ubuntu6"],"bundled":4}],"products":[{"vendor":"google","product":"libjxl"},{"vendor":"libjxl","product":"libjxl"},{"vendor":"libjxl_project","product":"libjxl"}],"references":[{"url":"https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159","tags":["x_transferred","Patch","web"]},{"url":"https://github.com/libjxl/libjxl/pull/2101","tags":["x_transferred","Issue Tracking","Patch","fix"]},{"url":"http://www.openwall.com/lists/oss-security/2026/06/29/3","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0645","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-378h-jm2h-7wrm"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/0xxx/CVE-2023-0645.json","tags":["advisory"]},{"url":"https://github.com/libjxl/libjxl","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-0645","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-0645","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-0645","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7637-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-35790","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-11403","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-11498","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-0645","title":"Out of Bounds read in libjxl","description":"An out of bounds read exists in libjxl. An attacker using a specifically crafted file could cause an out of bounds read in the exif handler. We recommend upgrading to version 0.8.1 or past commit  https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159 https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159 ","status":"published","published":"2023-04-11T13:22:06.779Z","modified":"2026-06-29T19:34:42.108Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:35:35.256261Z"}],"euvd":[{"id":"EUVD-2023-12679","description":"An out of bounds read exists in libjxl. An attacker using a specifically crafted file could cause an out of bounds read in the exif handler. We recommend upgrading to version 0.8.1 or past commit  https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159 https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159 ","status":"published","published":"2023-04-11T13:22:06Z","modified":"2026-06-29T19:34:42Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T18:20:22.124605Z"}],"ghsa":[{"id":"GHSA-378h-jm2h-7wrm","title":"An out of bounds read exists in libjxl. An attacker using a specifically crafted file could cause...","description":"An out of bounds read exists in libjxl. An attacker using a specifically crafted file could cause an out of bounds read in the exif handler. We recommend upgrading to version 0.8.1 or past commit  https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159 https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159","status":"published","published":"2023-07-06T19:24:14Z","modified":"2026-06-29T21:31:49Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:09:04.017394Z"}],"nvd":[{"id":"CVE-2023-0645","description":"An out of bounds read exists in libjxl. An attacker using a specifically crafted file could cause an out of bounds read in the exif handler. We recommend upgrading to version 0.8.1 or past commit  https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159 https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159 ","status":"published","published":"2023-04-11T14:15:07.59Z","modified":"2026-06-29T20:16:50.417Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:07:53.719171Z"}],"osv":[{"id":"CVE-2023-0645","title":"Out of Bounds read in libjxl","description":"An out of bounds read exists in libjxl. An attacker using a specifically crafted file could cause an out of bounds read in the exif handler. We recommend upgrading to version 0.8.1 or past commit  https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159 https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159 ","status":"published","published":"2023-04-11T13:22:06.779Z","modified":"2026-10-28T02:31:02.452811119Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:44:29.487253Z"},{"id":"DEBIAN-CVE-2023-0645","description":"An out of bounds read exists in libjxl. An attacker using a specifically crafted file could cause an out of bounds read in the exif handler. We recommend upgrading to version 0.8.1 or past commit  https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159 https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159","status":"published","published":"2023-04-11T14:15:07.59Z","modified":"2026-10-26T18:01:18.718700898Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:39.369204Z"},{"id":"UBUNTU-CVE-2023-0645","description":"An out of bounds read exists in libjxl. An attacker using a specifically crafted file could cause an out of bounds read in the exif handler. We recommend upgrading to version 0.8.1 or past commit https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159 https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159","status":"published","published":"2023-04-11T14:15:00Z","modified":"2026-04-22T13:59:39.780788Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"},{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T16:54:18.756095Z"},{"id":"DSA-5958-1","title":"jpeg-xl - security update","status":"published","published":"2025-07-04T00:00:00Z","modified":"2026-03-09T02:08:56.665475Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"USN-7637-1","title":"jpeg-xl vulnerabilities","description":"It was discovered that libjxl did not perform proper bounds checking\nwhen parsing Exif tags. An attacker could possibly use this issue to\ncause libjxl to crash, resulting in a denial of service. (CVE-2023-0645)\n\nIt was discovered that libjxl did not perform proper bounds checking \nwhen decoding patches. An attacker could possibly use this issue to\ncause libjxl to enter an infinite loop, resulting in a denial of \nservice. (CVE-2023-35790)\n\nIt was discovered that libjxl did not perform proper bounds checking\nwhen performing JPEG recompression. An attacker could possibly use this\nissue to cause libjxl to crash, resulting in a denial of service, or\npossibly execute arbitrary code. (CVE-2024-11403)\n\nIt was discovered that libjxl incorrectly handled parsing certain image\nfiles. An attacker could possibly use this issue to cause libjxl to \nconsume excessive amounts of memory, resulting in a denial of service.\n(CVE-2024-11498)","status":"published","published":"2025-07-14T16:31:56Z","modified":"2026-04-22T11:00:54.50932Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}