CVE-2012-3055

Stack-based buffer overflow in the Cisco WebEx Recording Format WRF player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP11, T27 LD before SP32 CP2, and T28 L10N before SP1 allows remote attackers to execute arbitrary code via a crafted DHT chunk in a JPEG image within a...

CVE-2013-1119

Buffer overflow in Cisco WebEx Recording Format WRF player T27 LD before SP32 EP16, T27 L10N before SP32ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted DHT index value in JPEG data within a WRF file, aka...

CVE-2019-13655

Imgix through 2019-06-19 allows remote attackers to cause a denial of service resource consumption by manipulating a small JPEG file to specify dimensions of 64250x64250 pixels, which is mishandled during an attempt to load the 'whole image' into memory...

CVE-2019-11926

Insufficient boundary checks when processing MSOFx markers from JPEG headers in the GD extension could allow access to out-of-bounds memory via a maliciously constructed invalid JPEG input. This issue affects HHVM versions prior to 3.30.9, all versions between 4.0.0 and 4.8.3, all versions betwee...

CVE-2016-11052

An issue was discovered on Samsung mobile devices with L5.0/5.1 software. jefree in libQjpeg.so in Qjpeg in Qt 5.5 allows memory corruption via a malformed JPEG file. The Samsung ID is SVE-2015-5110 January 2016...

CVE-2005-2309

Opera 8.01 allows remote attackers to cause a denial of service CPU consumption via a crafted JPEG image, as demonstrated using random.jpg...

CVE-2005-2308

The JPEG decoder in Microsoft Internet Explorer allows remote attackers to cause a denial of service CPU consumption or crash and possibly execute arbitrary code via certain crafted JPEG images, as demonstrated using 1 movfencepost.jpg, 2 cmpfencepost.jpg, 3 oomdos.jpg, or 4 random.jpg...

Apple macOS JPEG Image Decoding Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the decoding of JPEG...

Privacy-Preserving AI for Encrypted Medical Imaging: a Framework for Secure Diagnosis and Learning

The rapid integration of Artificial Intelligence AI into medical diagnostics has raised pressing concerns about patient privacy, especially when sensitive imaging data must be transferred, stored, or processed. In this paper, we propose a novel framework for privacy-preserving diagnostic inferenc...

gstreamer1-plugins-good: insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferences

A flaw was found in the GStreamer library. Insufficient error handling in the JPEG decoder can lead to NULL-pointer dereferences and cause crashes for certain input files, making it possible for a malicious actor to trigger a crash of the application...

The vulnerability of the nvJPEG2000 library in NVIDIA GPU graphics software allows a hacker to execute arbitrary code and rewrite data in the memory buffer.

The vulnerability of the nvJPEG2000 library in NVIDIA GPU graphics software is related to buffer overflows during the processing of the Ndecomp parameter. Exploiting this vulnerability allows a remote attacker to rewrite data in the memory buffer using a specially created malicious file...

CVE-2024-45567

Memory corruption while encoding JPEG format...

Security update for java-17-openjdk

This update for java-17-openjdk fixes the following issues: Update to upstream tag jdk-17.0.15+6 April 2025 CPU CVEs: CVE-2025-21587: Fixed JSSE unauthorized access, deletion or modification of critical data bsc1241274 CVE-2025-30691: Fixed Oracle Java SE Compiler Unauthorized Data Access...

CVE-2024-45567

Memory corruption while encoding JPEG format...

CVE-2024-45567

Memory corruption while encoding JPEG format...

CVE-2024-45567 Use After Free in Camera Driver

Memory corruption while encoding JPEG format...

CVE-2024-45567

CVE-2024-45567 describes a memory corruption issue in Qualcomm camera driver related to JPEG encoding. The CVE is tied to Qualcomm chipsets and affects the JPEG encoding path, with root cause identified as memory corruption during the encoding process. Documented impact is high (CVSS 3.1: AV=L, A...

CVE-2024-45567 Use After Free in Camera Driver

Memory corruption while encoding JPEG format...

PT-2025-19848 · Qualcomm · Snapdragon +14

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue involves memory corruption that occurs while encoding JPEG format. This problem is related to the process of handling JPEG encoding, which can lead to memory corruption...

The vulnerability of the JpgInput::jpeg_decode_iptc() function in the src/jpeg.imageio/jpeginput.cpp module of the OpenImageIO library allows a malicious actor to access protected information or cause service failures.

The vulnerability of the JpgInput::jpegdecodeiptc function in the src/jpeg.imageio/jpeginput.cpp module of the OpenImageIO library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain access to protected information or cause...