Rocky Linux 9 [CIQ] Security Update: libjpeg-turbo / libjpeg-turbo-debuginfo / libjpeg-turbo-debugsource / etc (crlsa-2024_2295)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20242295 advisory. libjpeg-turbo: heap-buffer-overflow vulnerability in decompresssmoothdata in jdcoefct.c CVE-2021-29390 Tenable has extracted the preceding description block directl...

AlmaLinux 9.2 [TuxCare] Security Update: libjpeg-turbo / libjpeg-turbo-devel / libjpeg-turbo-utils / etc (ALMALINUX9.2:CLSA-2025:1744631931)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1744631931 advisory. - libjpeg-turbo version 2.0.90 has a heap-based buffer over-read 2 bytes in decompresssmoothdata in jdcoefct.c. CVE-2021-29390 Note that Ness...

libjpeg-turbo Heap Buffer Overflow DoS

The vulnerability of the decompresssmoothdata library used for working with images in libjpeg-turbo is related to writing beyond the buffer memory boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

skia:animated_image_decode: Use-of-uninitialized-value in decompress_smooth_data

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=4573919847186432 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: animatedimagedecode Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

ALSA-2024:2295 Moderate: libjpeg-turbo security update

The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance. Security Fixes: libjpeg-turbo:...

CVE-2021-29390

A heap buffer over-read flaw was found in libjpeg-turbo. For certain types of smoothed jpeg images, the decompresssmoothdata function may improperly enter a condition statement that leads to heap memory read of uninitialized data, which may cause an application crash or loss of confidentiality...

CVE-2021-29390

libjpeg-turbo version 2.0.90 has a heap-based buffer over-read 2 bytes in decompresssmoothdata in jdcoefct.c...

CVE-2021-29390

libjpeg-turbo version 2.0.90 has a heap-based buffer over-read 2 bytes in decompresssmoothdata in jdcoefct.c...

Heap overflow

libjpeg-turbo version 2.0.90 has a heap-based buffer over-read 2 bytes in decompresssmoothdata in jdcoefct.c...

CVE-2021-29390

libjpeg-turbo version 2.0.90 has a heap-based buffer over-read 2 bytes in decompresssmoothdata in jdcoefct.c...

CVE-2021-29390: Out-of-bounds Write

libjpeg-turbo version 2.0.90 has a heap-based buffer over-read 2 bytes in decompresssmoothdata in jdcoefct.c...

CVE-2021-29390

libjpeg-turbo version 2.0.90 has a heap-based buffer over-read 2 bytes in decompresssmoothdata in jdcoefct.c...

CVE-2021-29390

libjpeg-turbo version 2.0.90 has a heap-based buffer over-read 2 bytes in decompresssmoothdata in jdcoefct.c...

CVE-2021-29390

libjpeg-turbo version 2.0.90 has a heap-based buffer over-read 2 bytes in decompresssmoothdata in jdcoefct.c...

OSV-2022-309 UNKNOWN READ in decompress_smooth_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46349 Crash type: UNKNOWN READ Crash state: decompresssmoothdata processdatasimplemain jpegreadscanlines...

libvips:mosaic_fuzzer: Crash in decompress_smooth_data

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5152537663111168 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: mosaicfuzzer Job Type: libfuzzerubsanlibvips Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000100000003 Crash...

imagemagick:encoder_jpg_fuzzer: Use-of-uninitialized-value in decompress_smooth_data

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5673136636559360 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderjpgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

qpdf:qpdf_fuzzer: Use-of-uninitialized-value in decompress_smooth_data

Detailed Report: https://oss-fuzz.com/testcase?key=6198025646768128 Project: qpdf Fuzzing Engine: libFuzzer Fuzz Target: qpdffuzzer Job Type: libfuzzermsanqpdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: decompresssmoothdata processdatacontextmain...

graphicsmagick:coder_JNX_fuzzer: Use-of-uninitialized-value in decompress_smooth_data

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5886460875767808 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJNXfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

imagemagick:encoder_pjpeg_fuzzer: Use-of-uninitialized-value in decompress_smooth_data

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5089057750908928 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpjpegfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...