CVE-2026-24797 An out of bounds write due to a missing bounds check in neka-nat/cupoch

Out-of-bounds Write vulnerability in neka-nat cupoch thirdparty/libjpeg-turbo/libjpeg-turbo modules. This vulnerability is associated with program files tjbench.C. This issue affects cupoch...

Cupoch security vulnerability

Cupoch is a robot developed by k-tanaka, featuring GPU computing capabilities. Cupoch has a security vulnerability, which stems from an out-of-bound write operation in the tjbench.C component of the third-party library libjpeg-turbo. This vulnerability may lead to memory corruption...

PT-2026-4866

Out-of-bounds Write vulnerability in neka-nat cupoch third party/libjpeg-turbo/libjpeg-turbo modules. This vulnerability is associated with program files tjbench.C. This issue affects cupoch...

CVE-2026-24797: Out-of-bounds Write

Out-of-bounds Write vulnerability in neka-nat cupoch thirdparty/libjpeg-turbo/libjpeg-turbo modules. This vulnerability is associated with program files tjbench.C. This issue affects cupoch...

Azure Linux 3.0 Security Update: fltk (CVE-2020-14152)

The version of fltk installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-14152 advisory. - In IJG JPEG aka libjpeg before 9d, jpegmemavailable in jmemnobs.c in djpeg does not honor the maxmemorytouse...

MiracleLinux 9 : libjpeg-turbo-2.0.90-6.el9 (AXSA:2023-5197:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5197:01 advisory. libjpeg-turbo: heap buffer overflow in getwordrgbrow in rdppm.c CVE-2021-46822 Tenable has extracted the preceding description block directly from the...

MiracleLinux 8 : libjpeg-turbo-1.5.3-12.el8 (AXSA:2021-2609:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2609:01 advisory. libjpeg-turbo: Stack-based buffer overflow in the transform component CVE-2020-17541 Tenable has extracted the preceding description block directly from the...

MiracleLinux 9 : libjpeg-turbo-2.0.90-7.el9 (AXSA:2024-7920:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-7920:01 advisory. libjpeg-turbo: heap-buffer-overflow vulnerability in decompresssmoothdata in jdcoefct.c CVE-2021-29390 Tenable has extracted the preceding description block...

MiracleLinux 7 : libjpeg-turbo-1.2.90-8.el7 (AXSA:2019-4124:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-4124:02 advisory. libjpeg: null pointer dereference in cjpeg CVE-2016-3616 libjpeg-turbo: heap-based buffer over-read via crafted 8-bit BMP in get8bitrow in rdbmp.c...

MiracleLinux 4 : libjpeg-turbo-1.2.1-3.AXS4 (AXSA:2014-038:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-038:01 advisory. The libjpeg-turbo package contains a library of functions for manipulating JPEG images. It also contains simple client programs for accessing the...

MiracleLinux 8 : libjpeg-turbo-1.5.3-14.el8_10 (AXSA:2025-9945:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9945:01 advisory. libjpeg-turbo: heap-based buffer over-read in getrgbrow in rdppm.c CVE-2020-13790 Tenable has extracted the preceding description block directly from the...

CVE-2022-37768

libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer...

CVE-2022-37770

libjpeg commit 281daa9 was discovered to contain a segmentation fault via LineMerger::GetNextLowpassLine at linemerger.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

CVE-2022-37769

libjpeg commit 281daa9 was discovered to contain a segmentation fault via HuffmanDecoder::Get at huffmandecoder.hpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

CVE-2022-31620

In libjpeg before 1.64, BitStream::Get in bitstream.hpp has an assertion failure that may cause denial of service. This is related to out-of-bounds array access during arithmetically coded lossless scan or arithmetically coded sequential scan...

CVE-2022-35166

libjpeg commit 842c7ba was discovered to contain an infinite loop via the component JPEG::ReadInternal...

The vulnerability of the decompress_smooth_data() library used for working with images in libjpeg-turbo, which allows a hacker to cause a service failure.

The vulnerability of the decompresssmoothdata library used for working with images in libjpeg-turbo is related to writing beyond the buffer memory boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

TencentOS Server 3: libjpeg-turbo (TSSA-2025:0444)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0444 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libjpeg-turbo (UTSA-2025-990665)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990665 advisory. The cjpeg utility in libjpeg allows remote attackers to cause a denial of service NULL pointer dereference and application crash or execute arbitrary code via a...

JLSEC-2025-177 libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the `put_pixel_rows` function in wrbmp.c,...

libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the putpixelrows function in wrbmp.c, as demonstrated by djpeg...