Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A remote attacker can send a malformed jpeg file to the service and cause arbitrary code execution or denial of service of the target service.

🗓️ 11 Jun 2021 07:00:00Reported by MicrosoftType

Libjpeg-turbo has a stack overflow in transform across all versions, enabling remote code execution or denial of service from malformed jpeg images.

Reporter	Title	Published	Views	Family All 100
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Event and Flow Exporter App is vulnerable to using components with known vulnerabilities (CVE-2021-31535, CVE-2020-17541)	16 Jun 202218:26	–	ibm
Tenable Nessus	Amazon Linux 2 : libjpeg-turbo (ALAS-2023-2254)	20 Sep 202300:00	–	nessus
Tenable Nessus	AlmaLinux 8 : libjpeg-turbo (ALSA-2021:4288)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : libjpeg-turbo (CESA-2021:4288)	11 Nov 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : libjpeg-turbo (EulerOS-SA-2021-2396)	14 Sep 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : libjpeg-turbo (EulerOS-SA-2021-2470)	24 Sep 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : libjpeg-turbo (EulerOS-SA-2021-2504)	27 Sep 202100:00	–	nessus
Tenable Nessus	EulerOS Virtualization 3.0.2.0 : libjpeg-turbo (EulerOS-SA-2021-2834)	29 Dec 202100:00	–	nessus
Tenable Nessus	EulerOS Virtualization 3.0.2.6 : libjpeg-turbo (EulerOS-SA-2021-2865)	6 Jan 202200:00	–	nessus
Tenable Nessus	EulerOS Virtualization 3.0.6.0 : libjpeg-turbo (EulerOS-SA-2022-1075)	12 Feb 202200:00	–	nessus