libjpeg-turbo: User-assisted execution of arbitrary code

Background libjpeg-turbo is a JPEG image codec that uses SIMD instructions MMX, SSE2, NEON, AltiVec to accelerate baseline JPEG compression and decompression. Description The accelerated Huffman decoder was previously invoked if there were 128 bytes in the input buffer. However, it is possible to...

libjpeg-turbo: Heap-buffer-overflow in gray_extrgb_convert_internal

Project: https://github.com/libjpeg-turbo/libjpeg-turbo.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6448589773471744 Project: libjpeg-turbo Fuzzer: libFuzzerlibjpeg-turbolibjpegturbofuzzer Fuzz target binary: libjpegturbofuzzer Job Type: libfuzzerasanlibjpeg-turbo...

CVE-2016-6702

A remote code execution vulnerability in libjpeg in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1 could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility ...

CVE-2016-6702

A remote code execution vulnerability in libjpeg in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1 could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility ...

Remote code execution

A remote code execution vulnerability in libjpeg in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1 could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility ...

CVE-2016-6702

A remote code execution vulnerability in libjpeg in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1 could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility ...

UBUNTU-CVE-2016-6702

A remote code execution vulnerability in libjpeg in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1 could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility ...

CVE-2016-6702

A remote code execution vulnerability in libjpeg in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1 could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility ...

CVE-2016-6702

CVE-2016-6702 describes a remote code execution vulnerability in the libjpeg library used by Android. The issue allows an attacker to run arbitrary code in the context of an unprivileged process by feeding a specially crafted file. Affected Android versions are 4.x prior to 4.4.4, 5.0.x prior to ...

CVE-2016-6702

A remote code execution vulnerability in libjpeg in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1 could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility ...

CVE-2016-6702

A remote code execution vulnerability in libjpeg in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1 could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility ...

CVE-2016-6702: Improper Access Control

A remote code execution vulnerability in libjpeg in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1 could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility ...

PT-2016-7062

Name of the Vulnerable Software and Affected Versions Android versions 4.x through 4.4.3 Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Description A remote code execution issue in libjpeg could allow an attacker to execute arbitrary code in the context of an unprivileg...

Google Android libjpeg Remote Code Execution Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. libjpeg is one of the C libraries that contains JPEG decoding, JPEG encoding, and other JPEG functions. A remote remote code execution vulnerability exists in libjpeg in Android. A...

libjpeg-turbo: Crash in libjpeg_turbo_fuzzer

Project: https://github.com/libjpeg-turbo/libjpeg-turbo.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5850953135685632 Target: libjpeg-turbo Fuzzer: libFuzzerlibjpeg-turbolibjpegturbofuzzer Fuzzer binary: libjpegturbofuzzer Job Type: libfuzzerasanlibjpeg-turbo Platfor...

libjpeg-turbo Remote Code Execution Vulnerability

libjpeg is a C library maintained by the Independent JPEG Group IJG that contains JPEG decoding, JPEG encoding, and other JPEG functions. libjpeg-turbo is a modified version of libjpeg optimized for x86 and x86-64 processors. A remote code execution vulnerability exists in libjpeg-turbo. An...

Updated libjpeg packages fix security vulnerability

Updated libjpeg packages fix security vulnerability: Out-of-Bounds Read in libjpeg-turbo before 1.5.0 via unusually long Blocks in MCU LJT-01-005...

MGASA-2016-0224 Updated libjpeg packages fix security vulnerability

Updated libjpeg packages fix security vulnerability: Out-of-Bounds Read in libjpeg-turbo before 1.5.0 via unusually long Blocks in MCU LJT-01-005...

PT-2016-7967

Name of the Vulnerable Software and Affected Versions libjpeg-turbo versions prior to 1.5.0 Description The issue is related to an Out-of-Bounds Read in libjpeg-turbo. This occurs when the software encounters unusually long blocks in MCU. Recommendations For versions prior to 1.5.0, update to...

GLSA-201606-03 : libjpeg-turbo: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201606-03 libjpeg-turbo: Multiple vulnerabilities libjpeg-turbo does not check for certain duplications of component data during the reading of segments that follow Start Of Scan SOS JPEG markers. Impact : Remote attackers could...