Vendors / Jpeg Records 16 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Jpeg records in CISA KEV No Jpeg vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 62
libjpeg commit db33a6e was discovered to contain a heap buffer overflow via LineBitmapRequester::EncodeRegion at linebitmaprequester.cpp.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00593 · Published 2023-07-13 · No fix listed CWE-787
Priority MEDIUM 62
libjpeg commit db33a6e was discovered to contain a reachable assertion via BitMapHook::BitMapHook at bitmaphook.cpp.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00598 · Published 2023-07-13 · No fix listed CWE-617
Priority LOW 36
jpeg-xl v0.3.2 is affected by a heap buffer overflow in /lib/jxl/coeff_order.cc ReadPermutation.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.01172 · Published 2021-03-05 · No fix listed CWE-787
Priority LOW 35
libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0114 · Published 2022-08-18 · No fix listed CWE-835
Priority LOW 31
There is an assertion failure in SingleComponentLSScan::ParseMCU in singlecomponentlsscan.cpp in libjpeg before 1.64 via an empty JPEG-LS scan.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00893 · Published 2022-06-10 · No fix listed CWE-617
Priority LOW 31
libjpeg 1.63 has a heap-based buffer over-read in HierarchicalBitmapRequester::FetchRegion in hierarchicalbitmaprequester.cpp because the MCU size can be different between allocation and use.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00939 · Published 2022-05-29 · No fix listed CWE-125
Priority LOW 30
libjpeg commit 281daa9 was discovered to contain a segmentation fault via LineMerger::GetNextLowpassLine at linemerger.cpp.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00764 · Published 2022-08-18 · No fix listed CWE-119
Priority LOW 30
libjpeg commit 281daa9 was discovered to contain a segmentation fault via HuffmanDecoder::Get at huffmandecoder.hpp.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00764 · Published 2022-08-18 · No fix listed CWE-119
Priority LOW 30
An issue was discovered in libjpeg through 2020021.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00863 · Published 2021-09-20 · No fix listed CWE-476
Priority LOW 30
An issue was discovered in libjpeg through 2020021.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00866 · Published 2021-09-20 · No fix listed CWE-476
Priority LOW 30
An issue was discovered in libjpeg through 2020021.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00866 · Published 2021-09-20 · No fix listed CWE-787
Priority LOW 30
An issue was discovered in libjpeg through 2020021.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00856 · Published 2021-09-20 · No fix listed CWE-476
Priority LOW 30
An issue was discovered in libjpeg through 2020021.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00853 · Published 2021-09-20 · No fix listed CWE-476
Priority LOW 30
An issue was discovered in libjpeg through 2020021.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00857 · Published 2021-09-20 · No fix listed CWE-476
Priority LOW 30
An issue was discovered in libjpeg through 2020021.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00853 · Published 2021-09-20 · No fix listed CWE-697
Priority LOW 25
libjpeg commit 842c7ba was discovered to contain an infinite loop via the component JPEG::ReadInternal.
CVSS 3.1 MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00296 · Published 2022-08-18 · No fix listed CWE-835
Open these records in search → All records by CVSS severity
0 2 14 0 0
THREATIST.IORead the docs