K000163015: libjpeg-turbo vulnerabilities CVE-2018-1152 and CVE-2020-13790

🗓️ 20 Aug 2026 21:24:58Reported by f5Type

f5🔗 my.f5.com👁 4 Views

F5 products not affected; libjpeg-turbo 1.5.90 and 2.0.4 have DoS and buffer over-read flaws.

Reporter	Title	Published	Views	Family All 164
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in libjpeg	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for July 2025.	7 Aug 202508:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps	25 Jun 202513:52	–	ibm
IBM Security Bulletins	Security Bulletin: WML CE: libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read	17 Jul 202022:58	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libjpeg affect IBM BladeCenter Advanced Management Module (AMM)	3 Oct 201816:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Netcool Operations Insights.	20 Nov 202516:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in libjpeg	7 Dec 202322:45	–	ibm
FreeBSD	mozjpeg -- heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file	3 Jun 202000:00	–	freebsd
FreeBSD	libjpeg-turbo -- Issue in the PPM reader causing a buffer overrun in cjpeg, TJBench, or the tjLoadImage() function.	3 Jun 202000:00	–	freebsd

20 Aug 2026 21:24Current

6.5Medium risk

Vulners AI Score6.5

CVSS 25.8

CVSS 36.5

CVSS 3.18.1

EPSS0.03445