Search CVE reports

Toggle filters

1 – 10 of 49 results

CVE-2021-29390

Medium priority
Not affected

libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c.

3 affected packages

libjpeg6b, libjpeg9, libjpeg-turbo

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libjpeg6b Not affected Not affected Not affected Not affected
libjpeg9 Not affected Not affected Not affected Not affected
libjpeg-turbo Not affected Not affected Not affected Not affected
Show less packages

CVE-2023-37837

Medium priority
Needs evaluation

libjpeg commit db33a6e was discovered to contain a heap buffer overflow via LineBitmapRequester::EncodeRegion at linebitmaprequester.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.

1 affected package

libjpeg

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libjpeg Needs evaluation Needs evaluation Needs evaluation Ignored
Show less packages

CVE-2023-37836

Medium priority
Needs evaluation

libjpeg commit db33a6e was discovered to contain a reachable assertion via BitMapHook::BitMapHook at bitmaphook.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.

1 affected package

libjpeg

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libjpeg Needs evaluation Needs evaluation Needs evaluation Ignored
Show less packages

CVE-2023-2804

Medium priority
Not affected

A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2_merged_upsample_internal() function of jdmrgext.c file. The vulnerability can only be exploited with 12-bit data precision for which the range of the...

3 affected packages

libjpeg9, libjpeg-turbo, libjpeg6b

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libjpeg9 — Not affected Not affected Not affected
libjpeg-turbo — Not affected Not affected Not affected
libjpeg6b — Not affected Not affected Not affected
Show less packages

CVE-2020-35538

Medium priority
Fixed

A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.

1 affected package

libjpeg-turbo

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libjpeg-turbo — Not affected Fixed Fixed
Show less packages

CVE-2022-37770

Low priority
Needs evaluation

libjpeg commit 281daa9 was discovered to contain a segmentation fault via LineMerger::GetNextLowpassLine at linemerger.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.

4 affected packages

libjpeg, libjpeg-turbo, libjpeg6b, libjpeg9

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libjpeg Needs evaluation Needs evaluation Needs evaluation Not in release
libjpeg-turbo Not affected Not affected Not affected Not affected
libjpeg6b Not affected Not affected Not affected Not affected
libjpeg9 Not affected Not affected Not affected Not affected
Show less packages

CVE-2022-37769

Low priority
Needs evaluation

libjpeg commit 281daa9 was discovered to contain a segmentation fault via HuffmanDecoder::Get at huffmandecoder.hpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.

4 affected packages

libjpeg, libjpeg-turbo, libjpeg6b, libjpeg9

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libjpeg Needs evaluation Needs evaluation Needs evaluation Not in release
libjpeg-turbo Not affected Not affected Not affected Not affected
libjpeg6b Not affected Not affected Not affected Not affected
libjpeg9 Not affected Not affected Not affected Not affected
Show less packages

CVE-2022-37768

Low priority
Needs evaluation

libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer.

4 affected packages

libjpeg, libjpeg-turbo, libjpeg6b, libjpeg9

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libjpeg Needs evaluation Needs evaluation Needs evaluation Not in release
libjpeg-turbo Not affected Not affected Not affected Not affected
libjpeg6b Not affected Not affected Not affected Not affected
libjpeg9 Not affected Not affected Not affected Not affected
Show less packages

CVE-2022-35166

Low priority
Needs evaluation

libjpeg commit 842c7ba was discovered to contain an infinite loop via the component JPEG::ReadInternal.

4 affected packages

libjpeg-turbo, libjpeg6b, libjpeg9, libjpeg

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libjpeg-turbo Not affected Not affected Not affected Not affected
libjpeg6b Not affected Not affected Not affected Not affected
libjpeg9 Not affected Not affected Not affected Not affected
libjpeg Needs evaluation Needs evaluation Needs evaluation Not in release
Show less packages

CVE-2021-46822

Low priority

Some fixes available 1 of 2

The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based...

1 affected package

libjpeg-turbo

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libjpeg-turbo — Not affected Fixed Not affected
Show less packages
  1. Previous page
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5
  7. Next page
Export to JSON