Search for packages
| purl | pkg:deb/debian/libjpeg-turbo@1:2.0.6-4?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-d73e-m4f8-73bc
Aliases: CVE-2021-46822 |
libjpeg-turbo: heap buffer overflow in get_word_rgb_row() in rdppm.c |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-2eke-m7j3-1qc5 | libjpeg-turbo: Divide By Zero in alloc_sarray function in jmemmgr.c |
CVE-2018-11212
|
| VCID-6qse-ddhe-f7ea | Two vulnerabilities have been discovered in libjpeg-turbo, the worse of which could allow remote attackers access to sensitive information. |
CVE-2013-6629
|
| VCID-77d3-x18w-a7f6 | Multiple vulnerabilities have been discovered in libjpeg-turbo, the worst of which could lead to arbitrary code execution. |
CVE-2020-17541
|
| VCID-95f9-st4n-wydt | libjpeg: Segmentation fault in get_text_rgb_row function in rdppm.c |
CVE-2018-11214
|
| VCID-9ewc-ttxk-eufx | Out-of-bounds Write libjpeg-turbo version 2.0.90 is vulnerable to a heap-buffer-overflow vulnerability in decompress_smooth_data in jdcoefct.c. |
CVE-2021-29390
|
| VCID-a3r5-u4q5-efhk | libjpeg-turbo: Null pointer dereference in jcopy_sample_rows() function |
CVE-2020-35538
|
| VCID-adpa-bp3z-vbhn | libjpeg-turbo: heap-based buffer over-read via crafted 8-bit BMP in get_8bit_row in rdbmp.c leads to denial of service |
CVE-2018-14498
|
| VCID-b91f-d2h1-8ya5 | Out-of-bounds Write A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2_merged_upsample_internal() function of jdmrgext.c file. The vulnerability can only be exploited with 12-bit data precision for which the range of the sample data type exceeds the valid sample range, hence, an attacker could craft a 12-bit lossless JPEG image that contains out-of-range 12-bit samples. An application attempting to decompress such image using merged upsampling would lead to segmentation fault or buffer overflows, causing an application to crash. |
CVE-2023-2804
|
| VCID-bz3a-w43e-y7fb | libjpeg-turbo: DoS via open crafted GIF |
CVE-2021-20205
|
| VCID-ed2r-h2fk-kqfq | A vulnerability in libjpeg-turbo could result in execution of arbitrary code or Denial of Service. |
CVE-2012-2806
|
| VCID-f5wv-ttaf-r7f4 | libjpeg: null pointer dereference in cjpeg |
CVE-2016-3616
|
| VCID-kq64-v665-tyht | libjpeg-turbo: denial of service via specially-crafted JPEG file |
CVE-2014-9092
|
| VCID-qbwh-xe67-rkdu | libjpeg-turbo: heap-based buffer overflow in tjLoadImage |
CVE-2018-20330
|
| VCID-rfqk-ffy7-yqee | Two vulnerabilities have been discovered in libjpeg-turbo, the worse of which could allow remote attackers access to sensitive information. |
CVE-2013-6630
|
| VCID-rgsc-btdd-m3he | An information disclosure vulnerability in libjpeg-turbo allow remote attackers to obtain sensitive information. |
CVE-2020-13790
|
| VCID-rswk-24y5-67dn | libjpeg: Segmentation fault in get_text_gray_row function in rdppm.c |
CVE-2018-11213
|
| VCID-tvq2-6ujj-7yet | libjpeg: "cjpeg" utility large loop because read_pixel in rdtarga.c mishandles EOF |
CVE-2018-11813
|
| VCID-ugd8-a68r-hugj | libjpeg-turbo: NULL pointer dereference in jdpostct.c and jquant1.c |
CVE-2017-15232
|
| VCID-uu2t-7ffz-j7bm | libjpeg-turbo: heap-based buffer over-read in the put_pixel_rows function in wrbmp.c |
CVE-2018-19664
|
| VCID-vrpv-znq2-6yd9 | libjpeg: improper handling of max_memory_to_use setting can lead to excessive memory consumption |
CVE-2020-14152
|
| VCID-w4km-zqts-3bhv | Several integer overflows in libjpeg-turbo might allow an attacker to execute arbitrary code. |
CVE-2019-2201
|
| VCID-wejg-2zp8-1yd3 | libjpeg: out-of-bounds read for certain table pointers in jdhuff.c |
CVE-2020-14153
|
| VCID-y4q6-9s32-rkej | A remote code execution vulnerability in libjpeg in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1 could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses libjpeg. Android ID: A-30259087. |
CVE-2016-6702
|
| VCID-zqqx-68x1-h3ak | libjpeg-turbo: Divide by zero allows for denial of service via crafted BMP image |
CVE-2018-1152
|