LI
Product
Libjpeg-turbo
16
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 10Low 0
Watch
Add Libjpeg-turbo to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-17541 | 8.8 | Jun 1 | Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component Affected: before 2.0.4 |
| CVE-2018-20330 | 8.8 | Dec 21 | The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is… Affected: 2.0.1 |
| CVE-2016-3616 | 8.8 | Feb 13 | The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or execute arbitrary code via a crafted file Affected: 7.4 |
| CVE-2020-13790 | 8.1 | Jun 3 | libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file Affected: 2.0.4 |
| CVE-2021-29390 | 7.1 | Aug 22 | libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c Affected: 2.0.90 |
Showing 5