CVE-2023-2804

A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2mergedupsampleinternal function of jdmrgext.c file. The vulnerability can only be exploited with 12-bit data precision for which the range of the sample data type exceeds the valid sample range, hence, an attacker could cra...

PT-2023-21504

Name of the Vulnerable Software and Affected Versions libjpeg-turbo affected versions not specified Description A heap-based buffer overflow issue was discovered in the h2v2 merged upsample internal function of the jdmrgext.c file. The issue can only be exploited with 12-bit data precision when t...