libjpeg-turbo libjpeg-turbo vulnerabilities and exploits

(subscribe to this query)

6.8

CVSSv2

Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A remote attacker can send a malformed jpeg file to the service and cause arbitrary code execution or denial of service of the target service.

Libjpeg-turbo Libjpeg-turbo

4.3

CVSSv2

The PPM reader in libjpeg-turbo up to and including 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row f...

Libjpeg-turbo Libjpeg-turbo

NA

A heap-based buffer overflow issue exists in libjpeg-turbo in h2v2_merged_upsample_internal() function of jdmrgext.c file. The vulnerability can only be exploited with 12-bit data precision for which the range of the sample data type exceeds the valid sample range, hence, an atta...

Libjpeg-turbo Libjpeg-turbo 2.1.90

4.3

CVSSv2

In libjpeg-turbo 2.0.2, a large amount of memory can be used during processing of an invalid progressive JPEG image containing incorrect width and height values in the image header. NOTE: the vendor's expectation, for use cases in which this memory usage would be a denial of...

Libjpeg-turbo Libjpeg-turbo 2.0.2

4.3

CVSSv2

libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file.

Libjpeg-turbo Libjpeg-turbo 1.5.2

4.3

CVSSv2

libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the put_pixel_rows function in wrbmp.c, as demonstrated by djpeg.

Libjpeg-turbo Libjpeg-turbo 2.0.1

6.8

CVSSv2

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench.

Libjpeg-turbo Libjpeg-turbo 2.0.1

NA

A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.

Libjpeg-turbo Libjpeg-turbo 2.0.5

4.3

CVSSv2

Libjpeg-turbo versions 2.0.91 and 2.0.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted GIF image.

Libjpeg-turbo Libjpeg-turbo 2.0.90 Fedoraproject Fedora 34

5.8

CVSSv2

libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.

Libjpeg-turbo Libjpeg-turbo 2.0.4 Mozilla Mozjpeg 4.0.0

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook