CVE-2018-13037

2018-07-0118:29:00

Google

osv.dev

8.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.7%

JSON

An issue was discovered in jpeg-compressor 0.1. The bmp_load function in stb_image.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact.

CPENameOperatorVersion
jpeg-compressoreq0.1

CPE	Name	Operator	Version
	jpeg-compressor	eq	0.1

References

github.com/fouzhe/security/tree/master/jpeg-compressor

github.com/kornelski/jpeg-compressor/issues/13