4.3
CVSSv2

CVE-2019-13960

Published: 18/07/2019 Updated: 14/05/2024
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

In libjpeg-turbo 2.0.2, a large amount of memory can be used during processing of an invalid progressive JPEG image containing incorrect width and height values in the image header. NOTE: the vendor's expectation, for use cases in which this memory usage would be a denial of service, is that the application should interpret libjpeg warnings as fatal errors (aborting decompression) and/or set limits on resource consumption or image sizes

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

libjpeg-turbo libjpeg-turbo 2.0.2

Vendor Advisories

Impact: Moderate Public Date: 2019-07-18 CWE: CWE-400 Bugzilla: 1734637: CVE-2019-13960 libjpeg-turbo: ...