Libjpeg-turbo vulnerabilities

Products

• Libjpeg-turbo 16

Newest

• libjpeg-turbo, fedoraproject fedora +1 more libjpeg-turbo version 2.0.90 is vulnerable to a heap-buffer-overflow vulnerability in... CVE-2021-29390 Fix available 7.1 HighAugust 22, 2023
• libjpeg-turbo A heap-based buffer overflow issue was discovered in libjpeg-turbo in... CVE-2023-2804 Fix available 6.5 MediumMay 25, 2023
• libjpeg-turbo A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed... CVE-2020-35538 Fix available 5.5 MediumAugust 31, 2022
• libjpeg-turbo The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit... CVE-2021-46822 Fix available 5.5 MediumJune 18, 2022
• libjpeg-turbo Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A... CVE-2020-17541 Fix available 8.8 HighJune 1, 2021
• libjpeg-turbo, fedoraproject fedora +1 more Libjpeg-turbo versions 2.0.91 and 2.0.90 is vulnerable to a denial of service vulnerability... CVE-2021-20205 Fix available 6.5 MediumMarch 10, 2021
• libjpeg-turbo, mozilla mozjpeg +1 more libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in... CVE-2020-13790 Fix available 8.1 HighJune 3, 2020
• libjpeg-turbo ** DISPUTED ** In libjpeg-turbo 2.0.2, a large amount of memory can be used during processing of... CVE-2019-13960 Disputed 5.5 MediumJuly 18, 2019
• libjpeg-turbo, mozilla mozjpeg, debian linux +2 more +4 more get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows... CVE-2018-14498 Fix available 6.5 MediumMarch 7, 2019
• libjpeg-turbo The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap... CVE-2018-20330 Fix available 8.8 HighDecember 21, 2018
• libjpeg-turbo libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the put_pixel_rows function in wrbmp.c,... CVE-2018-19664 Fix available 6.5 MediumNovember 29, 2018
• libjpeg-turbo, canonical ubuntu linux, debian linux +2 more libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by... CVE-2018-1152 Fix available 6.5 MediumJune 18, 2018
• libjpeg-turbo libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG... CVE-2017-15232 Fix available 6.5 MediumOctober 10, 2017
• canonical ubuntu linux, debian linux, libjpeg-turbo +1 more +3 more The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer... CVE-2016-3616 Fix available 8.8 HighFebruary 13, 2017
• libjpeg-turbo, canonical ubuntu linux, fedoraproject fedora +2 more libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service (crash) via a... CVE-2014-9092 Fix available 6.5 MediumDecember 23, 2014
• google chrome, libjpeg-turbo, artifex gpl ghostscript +8 more +10 more The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used... CVE-2013-6629 Fix available 5.0 MediumNovember 13, 2013