Lucene search

K
cvelistMitreCVELIST:CVE-2018-14498
HistoryMar 07, 2019 - 10:00 p.m.

CVE-2018-14498

2019-03-0722:00:00
mitre
www.cve.org

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.3%

get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries.