CVE-2023-0645

CVE-2023-0645 is a critical out-of-bounds read vulnerability in the libjxl library, specifically within its EXIF handler. An unauthenticated attacker can exploit this by providing a specially crafted file, leading to high impact on confidentiality and availability. With a CVSS score of 9.1, this vulnerability is easily exploitable over a network with no user interaction required. While there is no known active exploitation or public exploit code, the vulnerability has garnered significant community discussion, indicating awareness and potential future exploitation.