libjpeg 安全漏洞

libjpeg is a C language library for processing JPEG format image data. It includes JPEG decoding, JPEG encoding and other JPEG functions. A security vulnerability exists in libjpeg version db33a6e, which stems from an alertion issue via BitMapHook::BitMapHook include reachable in itmaphook.cpp,...

CVE-2023-37837

CVE-2023-37837 describes a heap buffer overflow in libjpeg, specifically in LineBitmapRequester::EncodeRegion (linebitmaprequester.cpp). The vulnerability can be triggered by a crafted file, enabling a Denial of Service (DoS). Affected component is libjpeg; root cause is a heap overflow in the En...

CVE-2023-37836

CVE-2023-37836 affects libjpeg due to a reachable assertion in BitmapHook::BitMapHook (bitmaphook.cpp) that can be triggered by a crafted file to cause a Denial of Service. The vulnerability relies on a specific commit (db33a6e) and is documented across multiple sources in the connected set; no v...

CVE-2023-37837

libjpeg commit db33a6e was discovered to contain a heap buffer overflow via LineBitmapRequester::EncodeRegion at linebitmaprequester.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

CVE-2023-37836

libjpeg commit db33a6e was discovered to contain a reachable assertion via BitMapHook::BitMapHook at bitmaphook.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

Heap-Based Buffer Overflow

libjpeg-turbo is vulnerable to Heap-Based Buffer Overflow. A malicious attacker could craft a 12-bit lossless JPEG image that contains out-of-range 12-bit samples, the application attempting to decompress the image could lead to buffer overflows...

PT-2023-35897 · Git +1 · Libjpeg-Turbo

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to an Invalid-free crash type. The crash state involves functions such as jpeg free large, jpeg abort, and jpeg finish decompress. No information is provided about...

libjpeg-turbo:transform_fuzzer_2_0_x: Invalid-free in jpeg_free_large

Detailed Report: https://oss-fuzz.com/testcase?key=5132762410254336 Project: libjpeg-turbo Fuzzing Engine: honggfuzz Fuzz Target: transformfuzzer20x Job Type: honggfuzzasanlibjpeg-turbo Platform Id: linux Crash Type: Invalid-free Crash Address: 0x62a000012200 Crash State: jpegfreelarge jpegabort...

libjpeg-turbo:transform_fuzzer_2_1_x: Heap-buffer-overflow in flush_bits

Detailed Report: https://oss-fuzz.com/testcase?key=6132209715904512 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: transformfuzzer21x Job Type: libfuzzerasani386libjpeg-turbo Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0xf1310800 Crash State: flushbit...

libjpeg-turbo:transform_fuzzer_2_0_x: Use-of-uninitialized-value in encode_one_block

Detailed Report: https://oss-fuzz.com/testcase?key=6750311948353536 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: transformfuzzer20x Job Type: libfuzzermsanlibjpeg-turbo Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: encodeoneblock...

EulerOS Virtualization 3.0.6.0 : libjpeg-turbo (EulerOS-SA-2023-2200)

According to the versions of the libjpeg-turbo packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a...

Huawei EulerOS: Security Advisory for libjpeg-turbo (EulerOS-SA-2023-2200)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ALPINE-CVE-2023-2804

A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2mergedupsampleinternal function of jdmrgext.c file. The vulnerability can only be exploited with 12-bit data precision for which the range of the sample data type exceeds the valid sample range, hence, an attacker could cra...

CVE-2023-2804 vulnerabilities

Vulnerabilities for packages: libjpeg-turbo...

CVE-2023-2804 vulnerabilities

Vulnerabilities for packages: libjpeg-turbo...

CVE-2023-2804

A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2mergedupsampleinternal function of jdmrgext.c file. The vulnerability can only be exploited with 12-bit data precision for which the range of the sample data type exceeds the valid sample range, hence, an attacker could cra...

CVE-2023-2804

A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2mergedupsampleinternal function of jdmrgext.c file. The vulnerability can only be exploited with 12-bit data precision for which the range of the sample data type exceeds the valid sample range, hence, an attacker could cra...

CVE-2023-2804

A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2mergedupsampleinternal function of jdmrgext.c file. The vulnerability can only be exploited with 12-bit data precision for which the range of the sample data type exceeds the valid sample range, hence, an attacker could cra...

Heap overflow

A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2mergedupsampleinternal function of jdmrgext.c file. The vulnerability can only be exploited with 12-bit data precision for which the range of the sample data type exceeds the valid sample range, hence, an attacker could cra...

libjpeg-turbo 缓冲区错误漏洞

libjpeg-turbo is a software application. Provides a JPEG image codec that uses SIMD instructions to accelerate baseline JPEG compression and decompression on x86, x86-64, Arm, PowerPC, and MIPS systems, and progressive JPEG compression on x86, x86-64, and Arm systems. A security vulnerability...