{"id":"CVE-2021-46822","aliases":["ALSA-2023:1068","DEBIAN-CVE-2021-46822","EUVD-2021-33478","GHSA-p468-hq86-gghc","JLSEC-2025-180","MGASA-2022-0353","OESA-2022-1745","RHSA-2023:1068","RLSA-2023:1068","ROOT-OS-DEBIAN-11-CVE-2021-46822","UBUNTU-CVE-2021-46822","USN-5631-1"],"status":"published","title":"The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit...","description":"The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row function in rdppm.c.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.01076,"percentile":0.65423,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2022-06-18T15:27:44Z","modified":"2026-10-29T11:31:23Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"libjpeg-turbo","fixed_in":["2.0.90-6.el9_1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libjpeg-turbo-devel","fixed_in":["2.0.90-6.el9_1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libjpeg-turbo-utils","fixed_in":["2.0.90-6.el9_1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"turbojpeg","fixed_in":["2.0.90-6.el9_1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"turbojpeg-devel","fixed_in":["2.0.90-6.el9_1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libjpeg-turbo","fixed_in":["1:2.1.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libjpeg-turbo","fixed_in":["1:2.1.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libjpeg-turbo","fixed_in":["1:2.1.1-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"JpegTurbo_jll","fixed_in":["2.1.0+0"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"libjpeg","fixed_in":["2.0.8-1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"libjpeg-turbo","fixed_in":["2.0.5-2.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"libjpeg-turbo","fixed_in":["2.0.5-2.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libjpeg-turbo","fixed_in":["0:2.0.90-6.el9_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libjpeg-turbo-debuginfo","fixed_in":["0:2.0.90-6.el9_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libjpeg-turbo-debugsource","fixed_in":["0:2.0.90-6.el9_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libjpeg-turbo-devel","fixed_in":["0:2.0.90-6.el9_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libjpeg-turbo-utils","fixed_in":["0:2.0.90-6.el9_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libjpeg-turbo-utils-debuginfo","fixed_in":["0:2.0.90-6.el9_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"turbojpeg-debuginfo","fixed_in":["0:2.0.90-6.el9_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libjpeg-turbo-debuginfo","fixed_in":["0:2.0.90-6.el9_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libjpeg-turbo-debugsource","fixed_in":["0:2.0.90-6.el9_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libjpeg-turbo-utils-debuginfo","fixed_in":["0:2.0.90-6.el9_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"turbojpeg","fixed_in":["0:2.0.90-6.el9_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"turbojpeg-debuginfo","fixed_in":["0:2.0.90-6.el9_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"turbojpeg-devel","fixed_in":["0:2.0.90-6.el9_1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"libjpeg-turbo","fixed_in":["0:2.0.90-6.el9_1"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"libjpeg-turbo","fixed_in":["1:2.0.6-4.root.io.1","1:2.0.6-4.root.io.2","1:2.0.6-4.root.io.4","1:2.0.6-4.aikido.6","1:2.0.6-4.root.io.3","1:2.0.6-4.root.io.5"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"rootio-libjpeg-turbo","fixed_in":["1:2.0.6-4.root.io.1","1:2.0.6-4.root.io.2","1:2.0.6-4.root.io.4","1:2.0.6-4.aikido.6","1:2.0.6-4.root.io.3","1:2.0.6-4.root.io.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libjpeg-turbo","fixed_in":["2.0.3-0ubuntu1.20.04.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.90-6.el9_1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libjpeg-turbo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.90-6.el9_1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libjpeg-turbo-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.90-6.el9_1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"turbojpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.90-6.el9_1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"turbojpeg-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.90-6.el9_1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.1-1"}]}]},{"source":"osv","ecosystem":"Julia","package":"JpegTurbo_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.1.0+0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"libjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.8-1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.5-2.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.5-2.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.90-6.el9_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libjpeg-turbo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.90-6.el9_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libjpeg-turbo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.90-6.el9_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libjpeg-turbo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.90-6.el9_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libjpeg-turbo-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.90-6.el9_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libjpeg-turbo-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.90-6.el9_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"turbojpeg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.90-6.el9_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libjpeg-turbo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.90-6.el9_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libjpeg-turbo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.90-6.el9_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libjpeg-turbo-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.90-6.el9_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"turbojpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.90-6.el9_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"turbojpeg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.90-6.el9_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"turbojpeg-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.90-6.el9_1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.90-6.el9_1"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.6-4.root.io.1"},{"fixed":"1:2.0.6-4.root.io.2"},{"fixed":"1:2.0.6-4.root.io.4"},{"fixed":"1:2.0.6-4.aikido.6"},{"fixed":"1:2.0.6-4.root.io.3"},{"fixed":"1:2.0.6-4.root.io.5"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"rootio-libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.6-4.root.io.1"},{"fixed":"1:2.0.6-4.root.io.2"},{"fixed":"1:2.0.6-4.root.io.4"},{"fixed":"1:2.0.6-4.aikido.6"},{"fixed":"1:2.0.6-4.root.io.3"},{"fixed":"1:2.0.6-4.root.io.5"}]}]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.3-0ubuntu1.20.04.3"}]}],"versions":["2.0.3-0ubuntu1","2.0.3-0ubuntu1.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-0ubuntu5.18.04.6"}]}],"versions":["1.5.2-0ubuntu5","1.5.2-0ubuntu5.18.04.1","1.5.2-0ubuntu5.18.04.3","1.5.2-0ubuntu5.18.04.4"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libjpeg-turbo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.3-0ubuntu1.20.04.3"}]}],"versions":["2.0.3-0ubuntu1","2.0.3-0ubuntu1.20.04.1"],"bundled":4}],"products":[{"vendor":"libjpeg-turbo","product":"libjpeg-turbo"}],"references":[{"url":"https://github.com/libjpeg-turbo/libjpeg-turbo/commit/f35fd27ec641c42d6b115bfa595e483ec58188d2","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/221567","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry","advisory","web","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-46822","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-p468-hq86-gghc"},{"url":"https://access.redhat.com/errata/RHSA-2023:1068","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-46822","tags":["report"]},{"url":"https://bugzilla.redhat.com/2100044","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-1068.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-46822","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0353.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30886","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5631-1","tags":["advisory"]},{"url":"https://github.com/libjpeg-turbo/libjpeg-turbo/blob/2.0.8-esr/ChangeLog.md","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1745","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2100044","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1068.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-46822","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2023:1068","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-46822","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-11813","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-17541","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-35538","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2021-46822","description":"The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row function in rdppm.c.","status":"published","published":"2022-06-18T15:27:44Z","modified":"2024-08-04T05:17:42.633Z","updated_at":"2026-11-02T14:33:02.930115Z"}],"euvd":[{"id":"EUVD-2021-33478","description":"The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row function in rdppm.c.","status":"published","published":"2022-06-18T15:27:44Z","modified":"2024-08-04T05:17:42Z","updated_at":"2026-11-03T03:08:22.448202Z"}],"ghsa":[{"id":"GHSA-p468-hq86-gghc","title":"The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit...","description":"The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row function in rdppm.c.","status":"published","published":"2022-06-19T00:00:21Z","modified":"2023-01-27T05:05:01Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:42:36.158217Z"}],"nvd":[{"id":"CVE-2021-46822","description":"The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row function in rdppm.c.","status":"published","published":"2022-06-18T16:15:08.11Z","modified":"2026-06-17T04:15:37.047Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:07:06.501652Z"}],"osv":[{"id":"CVE-2021-46822","description":"The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row function in rdppm.c.","status":"published","published":"2022-06-18T16:15:08.11Z","modified":"2026-10-20T14:31:44.365305512Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:22.18434Z"},{"id":"DEBIAN-CVE-2021-46822","description":"The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row function in rdppm.c.","status":"published","published":"2022-06-18T16:15:08.11Z","modified":"2026-10-23T18:04:17.635428339Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:35.799676Z"},{"id":"JLSEC-2025-180","title":"The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit...","description":"The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the `get_word_rgb_row` function in rdppm.c.","status":"published","published":"2025-10-21T17:39:06.495Z","modified":"2026-07-23T22:30:17.284325273Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"OESA-2022-1745","title":"libjpeg-turbo security update","description":"\r\n\r\nSecurity Fix(es):\r\n\r\nThe PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row function in rdppm.c.(CVE-2021-46822)","status":"published","published":"2022-07-08T11:05:01Z","modified":"2026-08-18T01:16:45.058150664Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2023:1068","title":"Red Hat Security Advisory: libjpeg-turbo security update","status":"published","published":"2024-09-16T10:46:11Z","modified":"2026-06-26T12:22:19.066585142Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"UBUNTU-CVE-2021-46822","description":"The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row function in rdppm.c.","status":"published","published":"2022-06-18T16:15:00Z","modified":"2026-04-22T13:06:11.687064Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:30.277322Z"},{"id":"ALSA-2023:1068","title":"Moderate: libjpeg-turbo security update","description":"The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.\n\nSecurity Fix(es):\n\n* libjpeg-turbo: heap buffer overflow in get_word_rgb_row() in rdppm.c (CVE-2021-46822)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-03-06T00:00:00Z","modified":"2026-10-29T11:31:23.521729253Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"MGASA-2022-0353","title":"Updated libjpeg packages fix security vulnerability","description":"The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of\ntjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer\nand loading a 16-bit binary PGM file into an RGB buffer. This is related\nto a heap-based buffer overflow in the get_word_rgb_row function in\nrdppm.c. (CVE-2021-46822)\n","status":"published","published":"2022-10-01T17:48:24Z","modified":"2026-04-16T04:41:18.267309822Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"RLSA-2023:1068","title":"Moderate: libjpeg-turbo security update","description":"The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.\n\nSecurity Fix(es):\n\n* libjpeg-turbo: heap buffer overflow in get_word_rgb_row() in rdppm.c (CVE-2021-46822)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-03-08T16:38:23.030848Z","modified":"2026-02-05T07:15:10.687659Z","updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2021-46822","title":"CVE-2021-46822 in libjpeg-turbo - Patched by Root","description":"Root has patched CVE-2021-46822 in the libjpeg-turbo package for Root:Debian:11. Multiple fixed versions available.","status":"published","published":"2026-08-20T16:07:54Z","modified":"2026-08-20T17:30:07.35303391Z","updated_at":"2026-11-02T15:53:28.544053Z"},{"id":"USN-5631-1","title":"libjpeg-turbo vulnerabilities","description":"It was discovered that libjpeg-turbo incorrectly handled certain EOF\ncharacters. An attacker could possibly use this issue to cause\nlibjpeg-turbo to consume resource, leading to a denial of service. This\nissue only affected Ubuntu 18.04 LTS. (CVE-2018-11813)\n\nIt was discovered that libjpeg-turbo incorrectly handled certain malformed\njpeg files. An attacker could possibly use this issue to cause\nlibjpeg-turbo to crash, resulting in a denial of service. (CVE-2020-17541,\nCVE-2020-35538)\n\nIt was discovered that libjpeg-turbo incorrectly handled certain malformed\nPPM files. An attacker could use this issue to cause libjpeg-turbo to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-46822)\n","status":"published","published":"2022-09-22T16:49:20Z","modified":"2026-04-27T16:32:24.813887813Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}