libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in getrgbrow in rdppm.c via a malformed PPM input file...
8.1CVSS7AI score0.03205EPSS
SaveExploits1References3
OSV•added 2018/05/16 5:29 p.m.•4 views
DEBIAN-CVE-2018-11214
An issue was discovered in libjpeg 9a. The gettextrgbrow function in rdppm.c allows remote attackers to cause a denial of service Segmentation fault via a crafted file...
