SUSE CVE-2021-29390

libjpeg-turbo version 2.0.90 has a heap-based buffer over-read 2 bytes in decompresssmoothdata in jdcoefct.c...

libjpeg-turbo: heap-buffer-overflow vulnerability in decompress_smooth_data in jdcoefct.c

A heap buffer over-read flaw was found in libjpeg-turbo. For certain types of smoothed jpeg images, the decompresssmoothdata function may improperly enter a condition statement that leads to heap memory read of uninitialized data, which may cause an application crash or loss of confidentiality...

CVE-2021-29390

libjpeg-turbo version 2.0.90 has a heap-based buffer over-read 2 bytes in decompresssmoothdata in jdcoefct.c...

UBUNTU-CVE-2021-29390

libjpeg-turbo version 2.0.90 has a heap-based buffer over-read 2 bytes in decompresssmoothdata in jdcoefct.c...

libjpeg-turbo 缓冲区错误漏洞

libjpeg-turbo is a software application. Provides a JPEG image codec that uses SIMD instructions to accelerate baseline JPEG compression and decompression on x86, x86-64, Arm, PowerPC, and MIPS systems, and progressive JPEG compression on x86, x86-64, and Arm systems. A buffer error vulnerability...

PT-2023-12135

Name of the Vulnerable Software and Affected Versions libjpeg-turbo version 2.0.90 Description The issue is a heap-based buffer over-read in the decompress smooth data function in jdcoefct.c. This is a critical issue. Recommendations For libjpeg-turbo version 2.0.90, consider updating to a newer...

PT-2022-36915

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by an unknown read. The crash occurs in the decompress smooth data, process data simple main, and jpeg read scanline...

graphicsmagick:coder_JPG_fuzzer: Use-of-uninitialized-value in decompress_smooth_data

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5641886991384576 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJPGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

libtiff:tiff_read_rgba_fuzzer: Use-of-uninitialized-value in decompress_smooth_data

Detailed Report: https://oss-fuzz.com/testcase?key=5746090867163136 Project: libtiff Fuzzing Engine: libFuzzer Fuzz Target: tiffreadrgbafuzzer Job Type: libfuzzermsanlibtiff Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: decompresssmoothdata...

PT-2020-22155

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the decompress smooth data, process data context main,...