LI
Product
Libjpeg-turbo
16
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 10Low 0
Watch
Add Libjpeg-turbo to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-17541 | 8.8 | Jun 1 | Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component Affected: before 2.0.4 |
| CVE-2018-20330 | 8.8 | Dec 21 | The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is… Affected: 2.0.1 |
| CVE-2016-3616 | 8.8 | Feb 13 | The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or execute arbitrary code via a crafted file Affected: 7.4 |
| CVE-2020-13790 | 8.1 | Jun 3 | libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file Affected: 2.0.4 |
| CVE-2021-29390 | 7.1 | Aug 22 | libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c Affected: 2.0.90 |
| CVE-2023-2804 | 6.5 | May 25 | A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2_merged_upsample_internal() function of jdmrgext.c file Affected: 2.1.90 |
| CVE-2021-20205 | 6.5 | Mar 10 | Libjpeg-turbo versions 2.0.91 and 2.0.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted GIF image Affected: 2.0.90 |
| CVE-2018-14498 | 6.5 | Mar 7 | get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash)… Affected: through 1.5.90 |
| CVE-2018-19664 | 6.5 | Nov 29 | libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the put_pixel_rows function in wrbmp.c, as demonstrated by djpeg Affected: 2.0.1 |
| CVE-2018-1152 | 6.5 | Jun 18 | libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image Affected: 1.5.90 |
| CVE-2017-15232 | 6.5 | Oct 11 | libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file Affected: 1.5.2 |
| CVE-2014-9092 | 6.5 | Oct 10 | libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service (crash) via a crafted JPEG file, related to the Exif marker Affected: through 1.2.90 |
| CVE-2020-35538 | 5.5 | Aug 31 | A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo Affected: 2.0.5 |
| CVE-2021-46822 | 5.5 | Jun 18 | The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into… Affected: after 1.5.3 through 2.0.90 |
| CVE-2019-13960 | 5.5 | Jul 18 | In libjpeg-turbo 2.0.2, a large amount of memory can be used during processing of an invalid progressive JPEG image containing incorrect width and height values in the image… Affected: 2.0.2 |
| CVE-2013-6629 | – | Nov 19 | The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not… Affected: before 1.3.1 |
Showing 16