The vulnerability of the h2v2_merged_upsample_internal() function in the libjpeg-turbo library, which allows a hacker to trigger a service failure

The vulnerability of the h2v2mergedupsampleinternal function in the libjpeg-turbo library is related to writing beyond buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2023-2804

A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2mergedupsampleinternal function of jdmrgext.c file. The vulnerability can only be exploited with 12-bit data precision for which the range of the sample data type exceeds the valid sample range, hence, an attacker could cra...