CVE-2023-0645

Name of the Vulnerable Software and Affected Versions libjxl versions prior to 0.8.1

Description An out of bounds read exists in libjxl. An attacker using a specifically crafted file could cause an out of bounds read in the exif handler.

Recommendations For versions prior to 0.8.1, we recommend upgrading to version 0.8.1 or applying the changes from the commit https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159 to fix the issue. As a temporary workaround, consider restricting the use of specifically crafted files that could cause an out of bounds read in the exif handler until a patch is available.