Ubuntu 22.04 LTS / 24.04 LTS / 25.10 : GDK-PixBuf vulnerability (USN-8156-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by a vulnerability as referenced in the USN-8156-1 advisory. It was discovered that GDK-PixBuf incorrectly handled certain JPEG files. An attacker could use this issue to cause GDK-PixBuf to crash,...

Amazon Linux 2023 : cuda-minimal-build-12 (ALAS2023NVIDIA-2025-224)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-224 advisory. NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to...

Amazon Linux 2023 : cuda-nvtx-12 (ALAS2023NVIDIA-2025-215)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-215 advisory. NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to...

Amazon Linux 2023 : cuda-toolkit (ALAS2023NVIDIA-2025-210)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-210 advisory. NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to...

Medium: libnvjpeg-12-9

Issue Overview: NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to information disclosure or denial of service. CVE-2025-23272 Affected Packages:...

Medium: libcufile-12-9

Issue Overview: NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to information disclosure or denial of service. CVE-2025-23272 Affected Packages:...

Medium: cuda-documentation-12-9

Issue Overview: NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to information disclosure or denial of service. CVE-2025-23272 Affected Packages:...

Medium: cuda-cudart-12-9

Issue Overview: NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to information disclosure or denial of service. CVE-2025-23272 Affected Packages:...

FreeBSD : exiv2 -- Denial-of-service (340dc4c1-895a-11f0-b6e5-4ccc6adda413)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 340dc4c1-895a-11f0-b6e5-4ccc6adda413 advisory. Kevin Backhouse reports: A denial-of-service was found in Exiv2 version v0.28.5: a quadratic algorithm ...

CVE-2025-55304

A denial of service flaw was found in exiv2. A quadratic algorithm in the ICC profile parsing code in the jpegBase::readMetadata function can cause Exiv2 to run for a long time. When Exiv2 is used to read the metadata of a crafted jpg image file, it triggers a denial of service. Mitigation...

CLSA-2025-1744631931 libjpeg-turbo: Fix of CVE-2021-29390

CVE-2021-29390: fix buffer overrun with certain narrow prog JPEGs...

CVE-2022-49165 media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers

In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers If the application queues an NV12M jpeg as output buffer, but then queues a single planar capture buffer, the kernel will crash with "Unable to handle kerne...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the imx-jpeg driver not properly handling single-plane buffers when decoding NV12M jpegs, resulting in a cra...

UBUNTU-CVE-2024-28571

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to cause a denial of service DoS via the fillinputbuffer function when reading images in JPEG format...

SUSE CVE-2013-6630

The getdht function in jdmarker.c in libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48 and other products, does not set all elements of a certain Huffman value array during the reading of segments that follow Define Huffman Table DHT JPEG markers, which allows remote...

PT-2022-30059

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue concerns the decoding of NV12M jpegs into single-planar buffers in the media: imx-jpeg component. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2022-29737

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.16.19 Description The issue concerns the decoding of NV12M jpegs into single-planar buffers. It is related to the imx-jpeg media component. The actual impact and attack plausibility have not yet been proven...

PT-2022-29414

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue concerns the decoding of NV12M jpegs into single-planar buffers. It is related to the imx-jpeg media component. The actual impact and potential for attack have not been proven yet...

PT-2022-6564 · Ffjpeg · Ffjpeg

Name of the Vulnerable Software and Affected Versions: ffjpeg versions prior to 01.01.2021 Description: The issue is a global buffer overflow that could cause a Denial of Service by using a crafted jpeg file. It is similar to a previously known issue. The problem lies in the jfif encode function ...

PT-2022-7150 · Open Design Alliance · Open Design Alliance Drawings Sdk

Name of the Vulnerable Software and Affected Versions: Open Design Alliance Drawings SDK versions prior to 2022.12.1 Description: The issue is related to a buffer overflow in the Drawings SDK, which can be exploited by an attacker using a specially crafted file, potentially leading to the executi...