JPEGDEC 安全漏洞

JPEGDEC is a JPEG decoder optimized for Arduino by the individual developer Larry Bank. JPEGDEC suffers from a security vulnerability that originates from a global buffer overflow in the JPEGDecodeMCU module of the /src/jpeg.inl file...

PT-2022-36917

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This can lead to ...

PT-2022-36918

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free READ 4 crash type. The crash state involves several function calls, including decode mcu, decompress onepass,...

PT-2022-36911

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, specifically a WRITE 4 crash type. The crash occurs in the following functions: decode mcu, consume...

The vulnerability of the decode_mcu() function in the libjpeg-turbo library allows a attacker to compromise the accessibility of protected information.

The vulnerability of the decodemcu function in the libjpeg-turbo library is related to resource management errors. Exploiting this vulnerability allows a remote attacker to compromise the accessibility of protected information by excessive consumption of processor resources...

The vulnerabilities of the decode_mcu() and decode_mcu_fast() functions in the libjpeg-turbo library allow a hacker to cause a service failure.

The vulnerability of the decodemcu and decodemcufast functions in the libjpeg-turbo library arises from the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure by using a specially crafted file...

PT-2021-4487

Name of the Vulnerable Software and Affected Versions libjpeg-turbo affected versions not specified Description The issue is caused by a buffer overflow in the decode mcu and decode mcu fast functions of the libjpeg-turbo library, which is used for image processing. This can be exploited by a...

PT-2021-4488

Name of the Vulnerable Software and Affected Versions libjpeg-turbo affected versions not specified Description The issue is related to errors in resource management in the decode mcu function of the libjpeg-turbo image processing library. Exploitation of this issue may allow a remote attacker to...

PT-2021-28215

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow READ 1 crash type. The crash state involves several function calls: decode mcu fast, decode mcu, and consu...