Vendors / Ijg Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 3 CVSS 7.0–8.9
Exploited now Ijg records in CISA KEV No Ijg vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 39
libjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.03139 · Published 2018-06-06 · Partial fix CWE-834
Priority LOW 36
An issue was discovered in libjpeg 9a and 9d.
CVSS 3.0 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.04558 · Published 2018-05-16 · Partial fix CWE-369
Priority LOW 34
In IJG JPEG (aka libjpeg) before 9d, jpeg_mem_available() in jmemnobs.c in djpeg does not honor the max_memory_to_use setting, possibly causing excessive memory consumption.
CVSS 3.1 HIGH 7.1· Local · No auth · User interaction · EPSS 0.01488 · Published 2020-06-15 · Will not fix CWE-400
Priority LOW 34
An issue was discovered in libjpeg 9a.
CVSS 3.0 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.02525 · Published 2018-05-16 · Partial fix
Priority LOW 33
In IJG JPEG (aka libjpeg) from version 8 through 9c, jdhuff.c has an out-of-bounds array read for certain table pointers.
CVSS 3.1 HIGH 7.1· Local · No auth · User interaction · EPSS 0.01008 · Published 2020-06-15 · Will not fix CWE-125
Priority LOW 33
An issue was discovered in libjpeg 9a.
CVSS 3.0 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.02344 · Published 2018-05-16 · Partial fix
Open these records in search → All records by CVSS severity
Critical0 High3 Medium3 Low0 No CVSS0