EUVD-2020-6309

Malware in sbrugna...

Fiona affected by CVE-2020-14152 related to madler-zlib

Summary Vulnerability scan of fiona shows CVE-2020-14152. The vulnerability is in libjpeg, a transitive dependency of fiona via GDAL and PROJ. Details In IJG JPEG aka libjpeg before 9d, jpegmemavailable in jmemnobs.c in djpeg does not honor the maxmemorytouse setting, possibly causing excessive...

GHSA-G4M4-9Q4C-MFW6 Fiona affected by CVE-2020-14152 related to madler-zlib

Summary Vulnerability scan of fiona shows CVE-2020-14152. The vulnerability is in libjpeg, a transitive dependency of fiona via GDAL and PROJ. Details In IJG JPEG aka libjpeg before 9d, jpegmemavailable in jmemnobs.c in djpeg does not honor the maxmemorytouse setting, possibly causing excessive...

EulerOS 2.0 SP3 : libjpeg-turbo (EulerOS-SA-2021-1085)

According to the version of the libjpeg-turbo packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In IJG JPEG aka libjpeg before 9d, jpegmemavailable in jmemnobs.c in djpeg does not honor the maxmemorytouse setting, possibly causing...

EulerOS Virtualization for ARM 64 3.0.2.0 : libjpeg-turbo (EulerOS-SA-2020-1949)

According to the versions of the libjpeg-turbo package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in getrgbrow in rdppm.c via a malforme...

EulerOS 2.0 SP5 : libjpeg-turbo (EulerOS-SA-2020-1939)

According to the versions of the libjpeg-turbo packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In IJG JPEG aka libjpeg before 9d, jpegmemavailable in jmemnobs.c in djpeg does not honor the maxmemorytouse setting, possibly causing...

CVE-2020-14152

In IJG JPEG aka libjpeg before 9d, jpegmemavailable in jmemnobs.c in djpeg does not honor the maxmemorytouse setting, possibly causing excessive memory consumption...

CVE-2020-14153

In IJG JPEG aka libjpeg from version 8 through 9c, jdhuff.c has an out-of-bounds array read for certain table pointers...

CVE-2020-14152

In IJG JPEG aka libjpeg before 9d, jpegmemavailable in jmemnobs.c in djpeg does not honor the maxmemorytouse setting, possibly causing excessive memory consumption...

CVE-2020-14153

In IJG JPEG aka libjpeg from version 8 through 9c, jdhuff.c has an out-of-bounds array read for certain table pointers...

CVE-2020-14153

In IJG JPEG aka libjpeg from version 8 through 9c, jdhuff.c has an out-of-bounds array read for certain table pointers...

CVE-2020-14152

In IJG JPEG aka libjpeg before 9d, jpegmemavailable in jmemnobs.c in djpeg does not honor the maxmemorytouse setting, possibly causing excessive memory consumption...

Out-of-bounds

In IJG JPEG aka libjpeg from version 8 through 9c, jdhuff.c has an out-of-bounds array read for certain table pointers...

Memory corruption

In IJG JPEG aka libjpeg before 9d, jpegmemavailable in jmemnobs.c in djpeg does not honor the maxmemorytouse setting, possibly causing excessive memory consumption...

CVE-2020-14152

In IJG JPEG aka libjpeg before 9d, jpegmemavailable in jmemnobs.c in djpeg does not honor the maxmemorytouse setting, possibly causing excessive memory consumption...

CVE-2020-14152

The CVE-2020-14152 issue affects libjpeg (IJG JPEG): in djpeg, jpeg_mem_available() does not honor the max_memory_to_use setting, which can lead to excessive memory usage. Connected documents corroborate the same description (e.g., Azure Linux/fltk advisory references) for versions prior to 9d. N...

CVE-2020-14152

In IJG JPEG aka libjpeg before 9d, jpegmemavailable in jmemnobs.c in djpeg does not honor the maxmemorytouse setting, possibly causing excessive memory consumption...

CVE-2020-14153

In IJG JPEG aka libjpeg from version 8 through 9c, jdhuff.c has an out-of-bounds array read for certain table pointers...

CVE-2020-14153

Affected software: IJG JPEG (libjpeg) up to version 9c. Root cause: out-of-bounds array read in jdhuff.c for certain table pointers. Impact (per provided CVE data): partial confidentiality, partial availability; local/remote exploitability details and user interaction are documented differently a...

CVE-2020-14153

In IJG JPEG aka libjpeg from version 8 through 9c, jdhuff.c has an out-of-bounds array read for certain table pointers...