CVE-2023-0645

概要

参考情報

• libjxl/libjxl#2101 · Issue Tracking
• libjxl/libjxl#2101 · Patch
• openwall.com/lists/oss-security/2026/06/29/3

libjxl のその他の脆弱性

• CVE-2026-1837高 7.5A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after that data from anoth…
• CVE-2025-12474中 4.4A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory. This can be done by causi…
• CVE-2024-11498高 7.5There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack spac…
• CVE-2024-11403緊急 9.8There exists an out of bounds read/write in LibJXL versions prior to commit 9cc451b91b74ba470fd72bd48c121e9f33d24c99. The JPEG decoder used …
• CVE-2023-35790高 7.5An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of se…