1405 matches found
MiracleLinux 8 : libjpeg-turbo-1.5.3-12.el8 (AXSA:2021-2609:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2609:01 advisory. libjpeg-turbo: Stack-based buffer overflow in the transform component CVE-2020-17541 Tenable has extracted the preceding description block directly from the...
MiracleLinux 9 : libjpeg-turbo-2.0.90-7.el9 (AXSA:2024-7920:01)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-7920:01 advisory. libjpeg-turbo: heap-buffer-overflow vulnerability in decompresssmoothdata in jdcoefct.c CVE-2021-29390 Tenable has extracted the preceding description block...
MiracleLinux 7 : libjpeg-turbo-1.2.90-8.el7 (AXSA:2019-4124:02)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-4124:02 advisory. libjpeg: null pointer dereference in cjpeg CVE-2016-3616 libjpeg-turbo: heap-based buffer over-read via crafted 8-bit BMP in get8bitrow in rdbmp.c...
MiracleLinux 4 : libjpeg-turbo-1.2.1-3.AXS4 (AXSA:2014-038:01)
The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-038:01 advisory. The libjpeg-turbo package contains a library of functions for manipulating JPEG images. It also contains simple client programs for accessing the...
MiracleLinux 8 : libjpeg-turbo-1.5.3-14.el8_10 (AXSA:2025-9945:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9945:01 advisory. libjpeg-turbo: heap-based buffer over-read in getrgbrow in rdppm.c CVE-2020-13790 Tenable has extracted the preceding description block directly from the...
CVE-2022-37768
libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer...
CVE-2022-37770
libjpeg commit 281daa9 was discovered to contain a segmentation fault via LineMerger::GetNextLowpassLine at linemerger.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...
CVE-2022-37769
libjpeg commit 281daa9 was discovered to contain a segmentation fault via HuffmanDecoder::Get at huffmandecoder.hpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...
CVE-2022-31620
In libjpeg before 1.64, BitStream::Get in bitstream.hpp has an assertion failure that may cause denial of service. This is related to out-of-bounds array access during arithmetically coded lossless scan or arithmetically coded sequential scan...
CVE-2022-35166
libjpeg commit 842c7ba was discovered to contain an infinite loop via the component JPEG::ReadInternal...
TencentOS Server 3: libjpeg-turbo (TSSA-2025:0444)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0444 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libjpeg-turbo (UTSA-2025-990665)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990665 advisory. The cjpeg utility in libjpeg allows remote attackers to cause a denial of service NULL pointer dereference and application crash or execute arbitrary code via a...
JLSEC-2025-177 libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the `put_pixel_rows` function in wrbmp.c,...
libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the putpixelrows function in wrbmp.c, as demonstrated by djpeg...
JLSEC-2025-178 The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based...
The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...
JLSEC-2025-179 Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component
Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A remote attacker can send a malformed jpeg file to the service and cause arbitrary code execution or denial of service of the target service...
JLSEC-2025-180 The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit...
The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the getwordrgbrow function in rdppm.c...
EUVD-2021-25874
Malware in sbrugna...
EUVD-2016-7605
Malware in sbrugna...