stb:stbi_read_fuzzer: Index-out-of-bounds in stbi__jpeg_huff_decode

Project: https://github.com/nothings/stb.git Detailed Report: https://oss-fuzz.com/testcase?key=4835644724084736 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbireadfuzzer Job Type: libfuzzerubsanstb Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

CVE-2019-13960

In libjpeg-turbo 2.0.2, a large amount of memory can be used during processing of an invalid progressive JPEG image containing incorrect width and height values in the image header. NOTE: the vendor's expectation, for use cases in which this memory usage would be a denial of service, is that the...

libjpeg-turbo Denial of Service Vulnerability

libjpeg is a C language library for processing image data in JPEG format. The product includes JPEG decoding, JPEG encoding and other JPEG functions. libjpeg-turbo is an optimized and improved version of libjpeg. A security vulnerability exists in libjpeg-turbo version 2.0.2. An attacker could...

Design/Logic Flaw

DISPUTED In libjpeg-turbo 2.0.2, a large amount of memory can be used during processing of an invalid progressive JPEG image containing incorrect width and height values in the image header. NOTE: the vendor's expectation, for use cases in which this memory usage would be a denial of service, is...

CVE-2019-13960: Allocation of Resources Without Limits or Throttling

In libjpeg-turbo 2.0.2, a large amount of memory can be used during processing of an invalid progressive JPEG image containing incorrect width and height values in the image header. NOTE: the vendor's expectation, for use cases in which this memory usage would be a denial of service, is that the...

Code injection

ffjpeg.dll in ffjpeg before 2018-08-22 allows remote attackers to cause a denial of service FPE signal via a progressive JPEG file that lacks an AC Huffman table...

CVE-2018-16781

ffjpeg.dll in ffjpeg before 2018-08-22 allows remote attackers to cause a denial of service FPE signal via a progressive JPEG file that lacks an AC Huffman table...

CVE-2018-16781

CVE-2018-16781 affects the ffjpeg library (ffjpeg.dll). Affected: ffjpeg versions prior to 2018-08-22. Vulnerability: processing a progressive JPEG file that lacks an AC Huffman table can trigger a denial of service (FPE signal). Impact: remote attackers can cause DoS via crafted images. Root cau...

CVE-2018-16781

ffjpeg.dll in ffjpeg before 2018-08-22 allows remote attackers to cause a denial of service FPE signal via a progressive JPEG file that lacks an AC Huffman table...

CVE-2018-16781: Incorrect Calculation

ffjpeg.dll in ffjpeg before 2018-08-22 allows remote attackers to cause a denial of service FPE signal via a progressive JPEG file that lacks an AC Huffman table...

PT-2018-13744 · FFmpeg · Ffjpeg

Name of the Vulnerable Software and Affected Versions: ffjpeg versions prior to 2018-08-22 Description: The issue allows remote attackers to cause a denial of service via a progressive JPEG file that lacks an AC Huffman table, resulting in an FPE signal. Recommendations: For versions prior to...