CVE-2021-29390

all versions

libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c.

7.1HIGH

CVE-2023-2804

all versions

A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2_merged_upsample_internal() function of jdmrgext.c file.

6.5MEDIUM

CVE-2020-35538

all versions

A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.

5.5MEDIUM

CVE-2021-46822

> 1.5.3 and <= 2.0.90

The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale

5.5MEDIUM

CVE-2020-17541

< 2.0.4

Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A remote attacker can send a malformed

8.8HIGH

CVE-2021-20205

all versions

Libjpeg-turbo versions 2.0.91 and 2.0.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when proces

6.5MEDIUM

CVE-2020-13790

all versions

libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input fi

8.1HIGH

CVE-2019-13960

all versions

In libjpeg-turbo 2.0.2, a large amount of memory can be used during processing of an invalid progressive JPEG image containing inc

5.5MEDIUM

CVE-2018-14498

<= 1.5.90

get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (h

6.5MEDIUM

CVE-2018-20330

all versions

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP imag

8.8HIGH

CVE-2018-19664

all versions

libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the put_pixel_rows function in wrbmp.c, as demonstrated by djpeg.

6.5MEDIUM

CVE-2018-1152

all versions

libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP i

6.5MEDIUM

CVE-2017-15232

all versions

libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file.

6.5MEDIUM

CVE-2014-9092

<= 1.2.90

libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service (crash) via a crafted JPEG file, related to the Ex

6.5MEDIUM

CVE-2017-9614

all versions

The fill_input_buffer function in jdatasrc.c in libjpeg-turbo 1.5.1 allows remote attackers to cause a denial of service (invalid

8.8HIGH

CVE-2016-3616

all versions

The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and application crash)

8.8HIGH

CVE-2013-6629

< 1.3.1

The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.165

CVE-2012-2806

all versions

Heap-based buffer overflow in the get_sos function in jdmarker.c in libjpeg-turbo 1.2.0 allows remote attackers to cause a denial

8.8HIGH