libjpeg 代码问题漏洞

libjpeg is a free library written entirely in C to handle the JPEG image data format. libjpeg 2020021 and earlier versions of blockbitmaprequester.cpp contain the BlockBitmapRequester::ReconstructUnsampled function is vulnerable to a null pointer dereference. An attacker could exploit this...

libjpeg 代码问题漏洞

libjpeg is a free library written entirely in C to handle the JPEG image data format. libjpeg 2020021 and earlier versions of huffmandecoder.hpp contain a null pointer dereference vulnerability in the HuffmanDecoder::Get function. An attacker can exploit this vulnerability to cause a denial of...

PT-2021-22605

Name of the Vulnerable Software and Affected Versions: libjpeg versions through 2020021 Description: An issue was discovered in libjpeg, where the LineBuffer::FetchRegion function in linebuffer.cpp has a heap-based buffer overflow. Recommendations: For versions through 2020021, as a temporary...

CVE-2021-39517: NULL Pointer Dereference

An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function BlockBitmapRequester::ReconstructUnsampled located in blockbitmaprequester.cpp. It allows an attacker to cause Denial of Service...

PT-2021-22604

Name of the Vulnerable Software and Affected Versions: libjpeg versions prior to 2020021 Description: An issue exists in the function BlockBitmapRequester::ReconstructUnsampled located in blockbitmaprequester.cpp, which allows an attacker to cause Denial of Service due to a NULL pointer...

CVE-2021-39518: Out-of-bounds Write

An issue was discovered in libjpeg through 2020021. LineBuffer::FetchRegion in linebuffer.cpp has a heap-based buffer overflow...

PT-2021-22603

Name of the Vulnerable Software and Affected Versions: libjpeg versions prior to 2020021 Description: An issue exists in the function HuffmanDecoder::Get located in huffmandecoder.hpp, which allows an attacker to cause Denial of Service due to a NULL pointer dereference. Recommendations: For...

Huawei EulerOS: Security Advisory for libjpeg-turbo (EulerOS-SA-2021-2396)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : libjpeg-turbo (EulerOS-SA-2021-2396)

According to the versions of the libjpeg-turbo packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Libjpeg-turbo all version have a stack-based buffer overflow in the 'transform' component. A remote attacker can send a malformed jpeg fi...

PT-2021-4485

Name of the Vulnerable Software and Affected Versions libjpeg-turbo affected versions not specified Description The issue is related to the alloc large and alloc sarray functions in the libjpeg-turbo library, which has shortcomings in handling input values. This can be exploited by a remote...

PT-2021-4486

Name of the Vulnerable Software and Affected Versions libjpeg-turbo affected versions not specified Description The issue is related to the tjInitDecompress function in the libjpeg-turbo library, which is used for image processing. It involves pointer dereference errors. An attacker, acting...

PT-2021-4487

Name of the Vulnerable Software and Affected Versions libjpeg-turbo affected versions not specified Description The issue is caused by a buffer overflow in the decode mcu and decode mcu fast functions of the libjpeg-turbo library, which is used for image processing. This can be exploited by a...

PT-2021-4489

Name of the Vulnerable Software and Affected Versions libjpeg-turbo affected versions not specified Description The issue is related to insufficient input data processing in the libjpeg-turbo library. It can be exploited by a remote attacker using a specially crafted JPEG file, potentially leadin...

PT-2021-4488

Name of the Vulnerable Software and Affected Versions libjpeg-turbo affected versions not specified Description The issue is related to errors in resource management in the decode mcu function of the libjpeg-turbo image processing library. Exploitation of this issue may allow a remote attacker to...

EulerOS Virtualization 3.0.2.2 : libjpeg-turbo (EulerOS-SA-2021-2144)

According to the version of the libjpeg-turbo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The libjpeg-turbo package contains a library of functions for manipulatingJPEG images.Security Fixes:libjpeg-turbo 1.5.2 has a...

openSUSE: Security Advisory for libjpeg-turbo (openSUSE-SU-2021:1958-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2021:1958-1 Security update for libjpeg-turbo

This update for libjpeg-turbo fixes the following issues: - CVE-2020-17541: Fixed a stack-based buffer overflow in the 'transform' component bsc1186764...

Security update for libjpeg-turbo (moderate)

openSUSE Security Update: Security update for libjpeg-turbo Announcement ID: openSUSE-SU-2021:1958-1 Rating: moderate References: 1186764 Cross-References: CVE-2020-17541 CVSS scores: CVE-2020-17541 NVD : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 An...

CVE-2020-17541 affecting package libjpeg-turbo 2.0.0-7

CVE-2020-17541 affecting package libjpeg-turbo 2.0.0-7. A patched version of the package is available...

Huawei EulerOS: Security Advisory for libjpeg-turbo (EulerOS-SA-2021-2093)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...