CVE-2020-14152

In IJG JPEG aka libjpeg before 9d, jpegmemavailable in jmemnobs.c in djpeg does not honor the maxmemorytouse setting, possibly causing excessive memory consumption...

UBUNTU-CVE-2020-14152

In IJG JPEG aka libjpeg before 9d, jpegmemavailable in jmemnobs.c in djpeg does not honor the maxmemorytouse setting, possibly causing excessive memory consumption...

CVE-2020-14153

In IJG JPEG aka libjpeg from version 8 through 9c, jdhuff.c has an out-of-bounds array read for certain table pointers...

Out-of-bounds

In IJG JPEG aka libjpeg from version 8 through 9c, jdhuff.c has an out-of-bounds array read for certain table pointers...

CVE-2020-14152

In IJG JPEG aka libjpeg before 9d, jpegmemavailable in jmemnobs.c in djpeg does not honor the maxmemorytouse setting, possibly causing excessive memory consumption...

CVE-2020-14152

The CVE-2020-14152 issue affects libjpeg (IJG JPEG): in djpeg, jpeg_mem_available() does not honor the max_memory_to_use setting, which can lead to excessive memory usage. Connected documents corroborate the same description (e.g., Azure Linux/fltk advisory references) for versions prior to 9d. N...

CVE-2020-14152

In IJG JPEG aka libjpeg before 9d, jpegmemavailable in jmemnobs.c in djpeg does not honor the maxmemorytouse setting, possibly causing excessive memory consumption...

CVE-2020-14153

In IJG JPEG aka libjpeg from version 8 through 9c, jdhuff.c has an out-of-bounds array read for certain table pointers...

CVE-2020-14153

Affected software: IJG JPEG (libjpeg) up to version 9c. Root cause: out-of-bounds array read in jdhuff.c for certain table pointers. Impact (per provided CVE data): partial confidentiality, partial availability; local/remote exploitability details and user interaction are documented differently a...

CVE-2020-14153

In IJG JPEG aka libjpeg from version 8 through 9c, jdhuff.c has an out-of-bounds array read for certain table pointers...

PT-2020-3024 · Ijg +1 · Libjpeg +1

Name of the Vulnerable Software and Affected Versions: IJG JPEG aka libjpeg versions prior to 9d Description: The issue is related to the jpeg mem available function in jmemnobs.c in djpeg, which does not honor the max memory to use setting, possibly causing excessive memory consumption. This cou...

CVE-2020-14152: Uncontrolled Resource Consumption

In IJG JPEG aka libjpeg before 9d, jpegmemavailable in jmemnobs.c in djpeg does not honor the maxmemorytouse setting, possibly causing excessive memory consumption...

CVE-2020-14153: Out-of-bounds Read

In IJG JPEG aka libjpeg from version 8 through 9c, jdhuff.c has an out-of-bounds array read for certain table pointers...

PT-2020-5652 · Libjpeg Turbo +8 · Libjpeg-Turbo +8

Name of the Vulnerable Software and Affected Versions: libjpeg-turbo versions 2.0.4 and earlier mozjpeg version 4.0.0 Description: The issue is related to a heap-based buffer over-read in the get rgb row function in rdppm.c via a malformed PPM input file. This can allow a remote attacker to acces...

Denial Of Service (DoS)

jpeg-js is vulnerable to denial of service DoS. The vulnerability exists as it fails to properly restrict the values of the resolution from the EXIF data, allowing a small manipulated image to cause a disproportionately large memory allocation...

ffjpeg buffer overflow vulnerability (CNVD-2020-31580)

ffjpeg is a JPEG encoder/decoder. A security vulnerability exists in the jfifencode of the jfif.c file in ffjpeg version 2020-02-24 and earlier. An attacker can exploit this vulnerability to cause a denial of service...

Documalis Free PDF Editor and Scanner JPEG Stack Buffer Overflow

Documalis Free PDF Editor version 5.7.2.26 and Documalis Free PDF Scanner version 5.7.2.122 do not appropriately validate the contents of JPEG images contained within a PDF. Attackers can exploit this vulnerability to trigger a buffer overflow on the stack and gain remote code execution as the us...

Samsung Mobile Device Code Execution Vulnerability

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. The Samsung mobile device code execution vulnerability can be exploited by an attacker to execute arbitrary code using crafted JPEG data...

Adobe Acrobat Reader DC JPEG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2020-12751

An issue was discovered on Samsung mobile devices with O8.X, P9.0, and Q10.0 software. The Quram image codec library allows attackers to overwrite memory and execute arbitrary code via crafted JPEG data that is mishandled during decoding. The Samsung ID is SVE-2020-16943 May 2020...