CVE-2018-11212

CVE-2018-11212 affects libjpeg/libjpeg-turbo: the alloc_sarray function in jmemmgr.c allows a remote attacker to cause a denial of service via a crafted file due to a divide-by-zero error. Public advisories (e.g., ALAS2-2019-1198, ALAS-2019-1286, AL2/ALSA-centos/CESA-2019:2052, Debian DLA-1638-1)...

CVE-2018-11213

CVE-2018-11213 (libjpeg-9a): The issue resides in the get_text_gray_row function in rdppm.c of libjpeg-turbo/libjpeg, allowing remote attackers to cause a denial of service (segmentation fault) via a crafted file. This is a bounds/validation oversight in processing PPM data, leading to a crash. P...

CVE-2018-11214

CVE-2018-11214 affects libjpeg 9a. The vulnerability is in the get_text_rgb_row function in rdppm.c, allowing remote attackers to cause a denial of service (Segmentation fault) via a crafted file (PPM text data). Multiple connected advisories reference this issue and note impact as a DoS vector d...