{"id":"CVE-2021-29390","aliases":["ALSA-2024:2295","CLSA-2025-1744631931","EUVD-2021-16025","GHSA-3f9q-r2pw-87vm","RHSA-2024:2295","RLSA-2024:2295","UBUNTU-CVE-2021-29390"],"status":"published","title":"libjpeg-turbo version 2.0.90 is vulnerable to a heap-buffer-overflow vulnerability in...","description":"libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c.","severity":{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00822,"percentile":0.57812,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2023-08-22T00:00:00Z","modified":"2026-10-29T11:31:08Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"libjpeg-turbo","fixed_in":["2.0.90-7.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libjpeg-turbo-devel","fixed_in":["2.0.90-7.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libjpeg-turbo-utils","fixed_in":["2.0.90-7.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"turbojpeg","fixed_in":["2.0.90-7.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"turbojpeg-devel","fixed_in":["2.0.90-7.el9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libjpeg-turbo","fixed_in":["2.0.90-6.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libjpeg-turbo-devel","fixed_in":["2.0.90-6.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libjpeg-turbo-utils","fixed_in":["2.0.90-6.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"turbojpeg","fixed_in":["2.0.90-6.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"turbojpeg-devel","fixed_in":["2.0.90-6.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libjpeg-turbo","fixed_in":["0:2.0.90-7.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libjpeg-turbo-debuginfo","fixed_in":["0:2.0.90-7.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libjpeg-turbo-debugsource","fixed_in":["0:2.0.90-7.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libjpeg-turbo-devel","fixed_in":["0:2.0.90-7.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libjpeg-turbo-utils","fixed_in":["0:2.0.90-7.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libjpeg-turbo-utils-debuginfo","fixed_in":["0:2.0.90-7.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"turbojpeg-debuginfo","fixed_in":["0:2.0.90-7.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libjpeg-turbo-debuginfo","fixed_in":["0:2.0.90-7.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libjpeg-turbo-debugsource","fixed_in":["0:2.0.90-7.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libjpeg-turbo-utils-debuginfo","fixed_in":["0:2.0.90-7.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"turbojpeg","fixed_in":["0:2.0.90-7.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"turbojpeg-debuginfo","fixed_in":["0:2.0.90-7.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"turbojpeg-devel","fixed_in":["0:2.0.90-7.el9"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"libjpeg-turbo","fixed_in":["0:2.0.90-7.el9"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.90-7.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libjpeg-turbo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.90-7.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libjpeg-turbo-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.90-7.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"turbojpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.90-7.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"turbojpeg-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.90-7.el9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.90-6.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libjpeg-turbo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.90-6.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libjpeg-turbo-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.90-6.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"turbojpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.90-6.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"turbojpeg-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.90-6.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.90-7.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libjpeg-turbo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.90-7.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libjpeg-turbo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.90-7.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libjpeg-turbo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.90-7.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libjpeg-turbo-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.90-7.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libjpeg-turbo-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.90-7.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"turbojpeg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.90-7.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libjpeg-turbo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.90-7.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libjpeg-turbo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.90-7.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libjpeg-turbo-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.90-7.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"turbojpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.90-7.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"turbojpeg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.90-7.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"turbojpeg-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.90-7.el9"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.90-7.el9"}]}]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"libjpeg-turbo","product":"libjpeg-turbo"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1943797","tags":["x_transferred","Issue Tracking","Permissions Required","report"]},{"url":"https://github.com/libjpeg-turbo/libjpeg-turbo/blob/4e52b66f342a803d3b8099b79607e3158d3a241c/jdcoefct.c#L595","tags":["x_transferred","Issue Tracking","report"]},{"url":"https://github.com/libjpeg-turbo/libjpeg-turbo/commits/main/jdcoefct.c","tags":["x_transferred","Patch","fix"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/27NR3KG553CG6LGPMP6SHWEVHTYPL6RC/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T655QF7CQ3DYAMPFV7IECQYGDEUIVVT/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KUQ7CTX3W372X3UY56VVNAHCH6H2F4X3/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-29390","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/27NR3KG553CG6LGPMP6SHWEVHTYPL6RC"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T655QF7CQ3DYAMPFV7IECQYGDEUIVVT"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KUQ7CTX3W372X3UY56VVNAHCH6H2F4X3"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27NR3KG553CG6LGPMP6SHWEVHTYPL6RC"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T655QF7CQ3DYAMPFV7IECQYGDEUIVVT"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KUQ7CTX3W372X3UY56VVNAHCH6H2F4X3"},{"url":"https://github.com/advisories/GHSA-3f9q-r2pw-87vm"},{"url":"https://access.redhat.com/errata/RHSA-2024:2295","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-29390","tags":["report"]},{"url":"https://bugzilla.redhat.com/2235521","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-2295.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1744631931.html","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2235521","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2295.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-29390","tags":["advisory","report"]},{"url":"https://github.com/libjpeg-turbo/libjpeg-turbo/commit/ccaba5d7894ecfb5a8f11e48d3f86e1f14d5a469","tags":["article"]},{"url":"https://github.com/libjpeg-turbo/libjpeg-turbo/issues/459#issuecomment-733720010","tags":["article"]},{"url":"https://github.com/libjpeg-turbo/libjpeg-turbo/pull/476","tags":["article"]},{"url":"https://github.com/libjpeg-turbo/libjpeg-turbo/pull/724","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2024:2295","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-29390","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2021-29390","description":"libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c.","status":"published","published":"2023-08-22T00:00:00Z","modified":"2024-10-04T16:11:31.673Z","updated_at":"2026-11-02T14:33:06.32268Z"}],"euvd":[{"id":"EUVD-2021-16025","description":"libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c.","status":"published","published":"2023-08-22T00:00:00Z","modified":"2024-10-04T16:11:31Z","updated_at":"2026-11-03T00:27:51.858084Z"}],"ghsa":[{"id":"GHSA-3f9q-r2pw-87vm","title":"libjpeg-turbo version 2.0.90 is vulnerable to a heap-buffer-overflow vulnerability in...","description":"libjpeg-turbo version 2.0.90 is vulnerable to a heap-buffer-overflow vulnerability in decompress_smooth_data in jdcoefct.c.","status":"published","published":"2023-08-22T21:30:26Z","modified":"2024-04-04T07:07:14Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:56:48.229282Z"}],"nvd":[{"id":"CVE-2021-29390","description":"libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c.","status":"published","published":"2023-08-22T19:16:20.237Z","modified":"2026-06-17T03:47:34.68Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:07:07.764332Z"}],"osv":[{"id":"CVE-2021-29390","description":"libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c.","status":"published","published":"2023-08-22T19:16:20.237Z","modified":"2026-10-20T10:54:36.912066132Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:19.129331Z"},{"id":"RHSA-2024:2295","title":"Red Hat Security Advisory: libjpeg-turbo security update","status":"published","published":"2024-09-16T17:02:16Z","modified":"2026-06-26T12:22:38.131701582Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RLSA-2024:2295","title":"Moderate: libjpeg-turbo security update","description":"The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.\n\nSecurity Fix(es):\n\n* libjpeg-turbo: heap-buffer-overflow vulnerability in decompress_smooth_data in jdcoefct.c (CVE-2021-29390)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.","status":"published","published":"2024-05-10T14:32:38.11477Z","modified":"2025-10-09T05:47:14.252408Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2021-29390","description":"libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c.","status":"withdrawn","published":"2023-08-22T19:16:00Z","modified":"2025-07-16T07:19:48.035109Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:26.779273Z"},{"id":"ALSA-2024:2295","title":"Moderate: libjpeg-turbo security update","description":"The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.\n\nSecurity Fix(es):\n\n* libjpeg-turbo: heap-buffer-overflow vulnerability in decompress_smooth_data in jdcoefct.c (CVE-2021-29390)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-04-30T00:00:00Z","modified":"2026-10-29T11:31:08.366430872Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"CLSA-2025-1744631931","title":"libjpeg-turbo: Fix of CVE-2021-29390","description":"- CVE-2021-29390: fix buffer overrun with certain narrow prog JPEGs","status":"published","published":"2025-04-14T11:58:56Z","modified":"2026-06-01T00:30:21.498351323Z","updated_at":"2026-11-02T15:43:41.66212Z"}]}}