CVE-2026-75466: Divide By Zero

libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palette through tj3LoadImage12 or tj3LoadImage16 using the default pixel format, the application may trigger a division-by-zero in allocsarray,...

CVE-2026-75466

libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palette through tj3LoadImage12 or tj3LoadImage16 using the default pixel format, the application may trigger a division-by-zero in allocsarray,...

CVE-2026-75466

The libjpeg-turbo 3.2.0 library contains an integer division-by-zero vulnerability within its PNG loader . When the application processes a valid indexed-color PNG image featuring a non-gray palette via the tj3LoadImage12() or tj3LoadImage16() functions using the default pixel format, it may trig...

CVE-2026-75466

libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palette through tj3LoadImage12 or tj3LoadImage16 using the default pixel format, the application may trigger a division-by-zero in allocsarray,...

CVE-2026-75466

libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palette through tj3LoadImage12 or tj3LoadImage16 using the default pixel format, the application may trigger a division-by-zero in allocsarray,...

EUVD-2026-66663

libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palette through tj3LoadImage12 or tj3LoadImage16 using the default pixel format, the application may trigger a division-by-zero in allocsarray,...

CVE-2026-75466

libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palette through tj3LoadImage12 or tj3LoadImage16 using the default pixel format, the application may trigger a division-by-zero in allocsarray,...

Linux Distros Unpatched Vulnerability : CVE-2026-75466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palett...

K000163015: libjpeg-turbo vulnerabilities CVE-2018-1152 and CVE-2020-13790

Security Advisory Description CVE-2018-1152 libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image. CVE-2020-13790 libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in getrgbrow in rdppm.c via ...

ROOT-OS-DEBIAN-11-CVE-2021-46822 CVE-2021-46822 in libjpeg-turbo - Patched by Root

Root has patched CVE-2021-46822 in the libjpeg-turbo package for Root:Debian:11. Multiple fixed versions available...

DEBIAN-CVE-2026-73075

Vim is an open source, command line text editor. From 9.2.0469 until 9.2.0843, popupmarkopacityzindex in src/popupwin.c can use a negative wwinrow for a text-property-anchored popup with clipwindow and opacity, indexing before the screen array instead of accounting for wpopuptopoff and causing an...

libjpeg-turbo:compress_fuzzer_3_1_x: Crash in jpeg_abort

Detailed Report: https://oss-fuzz.com/testcase?key=4668356662460416 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: compressfuzzer31x Job Type: libfuzzerubsanlibjpeg-turbo Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x55b358000000 Crash State: jpegabort tj3Compress8...

ANT-2026-5ETTYD84 · libjpeg-turbo · use-after-free

use-after-free low Severity Claude high · Security research firm low revised; sealed as high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-5ETTYD84: use-after-free at...

libjpeg-turbo:transform_fuzzer_3_0_x: Null-dereference READ in ubsan_GetStackTrace

Detailed Report: https://oss-fuzz.com/testcase?key=5028022114385920 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: transformfuzzer30x Job Type: libfuzzerubsanlibjpeg-turbo Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State:...

WS-2021-0185

libjpeg-turbo before 2.1.0 is vulnerable to heap-buffer-overflow in getwordrgbrow, related to rdppm.c...

libjpeg-turbo:compress_lossless_fuzzer_dev: Use-of-uninitialized-value in spng_decode_scanline

Detailed Report: https://oss-fuzz.com/testcase?key=5745070421901312 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: compresslosslessfuzzerdev Job Type: libfuzzermsanlibjpeg-turbo Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: spngdecodescanline...

February Microsoft Patch Tuesday

February Microsoft Patch Tuesday. A total of 55 vulnerabilities, half as many as in January. There are as many as six ❗️ vulnerabilities being exploited in the wild: 🔻 SFB/RCE - Windows Shell CVE-2026-21510 🔻 SFB/RCE - Microsoft Word CVE-2026-21514 🔻 SFB - MSHTML Framework CVE-2026-21513 🔻 EoP -...

The vulnerability of the h2v2_merged_upsample_internal() function in the libjpeg-turbo library, which allows a hacker to trigger a service failure

The vulnerability of the h2v2mergedupsampleinternal function in the libjpeg-turbo library is related to writing beyond buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

Red Hat, Inc. CVE-2023-2804: Heap Based Overflow libjpeg-turbo

A heap‑based buffer overflow exists in libjpeg‑turbo’s h2v2mergedupsampleinternal function when processing 12‑bit lossless JPEG images. An attacker could craft an image containing out‑of‑range 12‑bit samples that, when decompressed with merged upsampling enabled, may trigger a segmentation fault ...

KB5075897: Windows Server version 23H2 Security Update (February 2026)

The remote Windows host is missing security update 5075897. It is, therefore, affected by multiple vulnerabilities - A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2mergedupsampleinternal function of jdmrgext.c file. The vulnerability can only be exploited with 12-bit da...