CVE-2018-14944

CVE-2018-14944 affects the jpeg_encoder component (through 2015-11-27). The vulnerability is a segmentation fault in readFromBMP (jpeg_encoder.cpp) caused by an out-of-bounds write. NVD reports CVSS-3 base score 7.8 (HIGH) with LOCAL attack vector and user interaction required; CVSS-2 base 6.8 (M...

CVE-2018-14945

CVE-2018-14945 targets the jpeg_encoder project, with a heap-based buffer overflow in the function readFromBMP (jpeg_encoder.cpp). Reports across sources describe this as a heap overflow affecting builds up to 2015-11-27. CNVD-2018-17515 explicitly notes that an attacker could exploit this to exe...