{"id":"CVE-2018-10126","aliases":["DEBIAN-CVE-2018-10126","EUVD-2018-2204","GHSA-qjgq-4g88-9x8v","UBUNTU-CVE-2018-10126"],"status":"published","title":"LibTIFF 4.0.9 has a NULL pointer dereference in the jpeg_fdct_16x16 function in jfdctint.c.","description":"ijg-libjpeg before 9d, as used in tiff2pdf (from LibTIFF) and other products, does not check for a NULL pointer at a certain place in jpeg_fdct_16x16 in jfdctint.c.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0182,"percentile":0.789,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-476"],"published":"2018-04-21T21:00:00Z","modified":"2026-10-24T10:49:31Z","affected":[{"source":"osv","ecosystem":"Debian:12","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.5.0-6","4.5.0-6+deb12u1","4.5.0-6+deb12u2","4.5.0-6+deb12u3","4.5.0-6+deb12u4","4.5.1+git230720-1","4.5.1+git230720-2","4.5.1+git230720-3","4.5.1+git230720-4","4.5.1+git230720-5","4.5.1-1","4.5.1~rc3-1","4.6.0-1","4.6.0-2","4.7.0-1","4.7.0-2","4.7.0-3","4.7.0-4","4.7.0-5","4.7.1-1","4.7.1-2","4.7.1-3","4.7.2-1"]},{"source":"osv","ecosystem":"Debian:13","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.7.0-3","4.7.0-3+deb13u1","4.7.0-3+deb13u2","4.7.0-3+deb13u3","4.7.0-4","4.7.0-5","4.7.1-1","4.7.1-2","4.7.1-3","4.7.2-1"]},{"source":"osv","ecosystem":"Debian:14","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.7.0-3","4.7.0-4","4.7.0-5","4.7.1-1","4.7.1-2","4.7.1-3","4.7.2-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.0-0ubuntu1","1.3.0-0ubuntu2","1.3.0-0ubuntu2.1","1.3.0-0ubuntu2.1+esm1","1.3.0-0ubuntu2.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libjpeg6b","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6b1-3ubuntu1","6b1-4ubuntu1","6b1-4ubuntu1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.0-0ubuntu2","1.4.2-0ubuntu1","1.4.2-0ubuntu2","1.4.2-0ubuntu3","1.4.2-0ubuntu3.1","1.4.2-0ubuntu3.3","1.4.2-0ubuntu3.4","1.4.2-0ubuntu3.4+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libjpeg6b","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:6b2-2","1:6b2-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libjpeg9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:9a-2ubuntu1","1:9b-1","1:9b-1ubuntu1","1:9b-1ubuntu1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.5.2-0ubuntu5","1.5.2-0ubuntu5.18.04.1","1.5.2-0ubuntu5.18.04.3","1.5.2-0ubuntu5.18.04.4","1.5.2-0ubuntu5.18.04.6"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libjpeg6b","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:6b2-3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libjpeg9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:9b-2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.3-0ubuntu1","2.0.3-0ubuntu1.20.04.1","2.0.3-0ubuntu1.20.04.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libjpeg6b","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:6b2-3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libjpeg9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:9c-2","1:9d-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.6-0ubuntu2","2.0.6-0ubuntu3","2.1.1-0ubuntu1","2.1.2-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libjpeg6b","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:6b2-3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libjpeg9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:9d-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.5-2ubuntu1","2.1.5-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libjpeg6b","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:6b2-3.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libjpeg9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:9e-1","1:9e-1build1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.5-3ubuntu2","2.1.5-4ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libjpeg6b","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:6b2-4"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libjpeg9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:9f-2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.5-4ubuntu4","1:3.1.3-4ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"libjpeg6b","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:6b2-4build1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"libjpeg9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:9f-2build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.5-4ubuntu2","2.1.5-4ubuntu3","2.1.5-4ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libjpeg6b","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:6b2-4","1:6b2-4build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libjpeg9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:9f-2","1:9f-2build1"]}],"products":[{"vendor":"libtiff","product":"libtiff"}],"references":[{"url":"http://bugzilla.maptools.org/show_bug.cgi?id=2786","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://gitlab.com/libtiff/libtiff/-/issues/128","tags":["report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10126"},{"url":"https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E"},{"url":"https://github.com/advisories/GHSA-qjgq-4g88-9x8v"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-10126","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-10126","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10126","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-10126","description":"ijg-libjpeg before 9d, as used in tiff2pdf (from LibTIFF) and other products, does not check for a NULL pointer at a certain place in jpeg_fdct_16x16 in jfdctint.c.","status":"published","published":"2018-04-21T21:00:00Z","modified":"2024-08-20T04:17:24.678Z","updated_at":"2026-11-02T14:35:01.619448Z"}],"euvd":[{"id":"EUVD-2018-2204","description":"ijg-libjpeg before 9d, as used in tiff2pdf (from LibTIFF) and other products, does not check for a NULL pointer at a certain place in jpeg_fdct_16x16 in jfdctint.c.","status":"published","published":"2018-04-21T21:00:00Z","modified":"2024-08-20T04:17:24Z","updated_at":"2026-11-03T00:56:15.111746Z"}],"ghsa":[{"id":"GHSA-qjgq-4g88-9x8v","title":"LibTIFF 4.0.9 has a NULL pointer dereference in the jpeg_fdct_16x16 function in jfdctint.c.","description":"LibTIFF 4.0.9 has a NULL pointer dereference in the jpeg_fdct_16x16 function in jfdctint.c.","status":"published","published":"2022-05-13T01:11:24Z","modified":"2024-08-20T06:31:37Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:58:01.327673Z"}],"nvd":[{"id":"CVE-2018-10126","description":"ijg-libjpeg before 9d, as used in tiff2pdf (from LibTIFF) and other products, does not check for a NULL pointer at a certain place in jpeg_fdct_16x16 in jfdctint.c.","status":"published","published":"2018-04-21T21:29:00.29Z","modified":"2026-06-17T01:33:33.92Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:04:26.098615Z"}],"osv":[{"id":"CVE-2018-10126","description":"ijg-libjpeg before 9d, as used in tiff2pdf (from LibTIFF) and other products, does not check for a NULL pointer at a certain place in jpeg_fdct_16x16 in jfdctint.c.","status":"published","published":"2018-04-21T21:29:00.29Z","modified":"2026-10-24T10:49:31.894517306Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:07.641418Z"},{"id":"DEBIAN-CVE-2018-10126","description":"ijg-libjpeg before 9d, as used in tiff2pdf (from LibTIFF) and other products, does not check for a NULL pointer at a certain place in jpeg_fdct_16x16 in jfdctint.c.","status":"published","published":"2018-04-21T21:29:00.29Z","modified":"2026-10-23T18:02:56.174919526Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:29.988046Z"},{"id":"UBUNTU-CVE-2018-10126","description":"ijg-libjpeg before 9d, as used in tiff2pdf (from LibTIFF) and other products, does not check for a NULL pointer at a certain place in jpeg_fdct_16x16 in jfdctint.c.","status":"published","published":"2018-04-21T21:29:00Z","modified":"2026-10-17T12:53:48.79132414Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:16.544091Z"}]}}