PT-2022-12933 · Unknown +7 · Libjpeg-Turbo +7

🗓️ 26 Apr 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 2 Views

Heap overflow in get word rgb row during 16-bit PPM/PGM load; upgrade libjpeg-turbo beyond 2.0.90.

Reporter	Title	Published	Views	Family All 342
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in libjpeg	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 24.0.1-IF004 (June 2025)	2 Jul 202507:00	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	3 Jun 202511:35	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libjpeg affect IBM BladeCenter Advanced Management Module (AMM)	3 Oct 201816:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Transform Services for IBM i is vulnerable to denial of service, buffer overflow, and allowing attacker to obtain sensitive information due to multiple vulnerabilities.	17 Nov 202215:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Event and Flow Exporter App is vulnerable to using components with known vulnerabilities (CVE-2021-31535, CVE-2020-17541)	16 Jun 202218:26	–	ibm
IBM Security Bulletins	Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for June 2025.	16 Jul 202509:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in libjpeg	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for January 2026.	23 Feb 202609:25	–	ibm
Tenable Nessus	Amazon Linux 2 : libjpeg-turbo (ALAS-2019-1350)	7 Nov 201900:00	–	nessus

Source	Link
github	www.github.com/libjpeg-turbo/libjpeg-turbo/commit/f35fd27ec641c42d6b115bfa595e483ec58188d2
bdu	www.bdu.fstec.ru/vul/2020-03269
bdu	www.bdu.fstec.ru/vul/2023-07620
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-46822
ubuntu	www.ubuntu.com/security/CVE-2020-35538
cve	www.cve.org/CVERecord
bdu	www.bdu.fstec.ru/vul/2023-07622
linux	www.linux.oracle.com/errata/ELSA-2023-1068.html
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
ubuntu	www.ubuntu.com/security/notices/USN-5631-1

27 Apr 2024 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 3.15.5 - 8.8

CVSS 26.8

CVSS 37.5

EPSS0.00494