Priority MEDIUM 62
libjpeg commit db33a6e was discovered to contain a heap buffer overflow via LineBitmapRequester::EncodeRegion at linebitmaprequester.cpp.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00593 · Published 2023-07-13 · No fix listed CWE-787
Priority MEDIUM 62
libjpeg commit db33a6e was discovered to contain a reachable assertion via BitMapHook::BitMapHook at bitmaphook.cpp.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00598 · Published 2023-07-13 · No fix listed CWE-617
Priority LOW 30
libjpeg commit 281daa9 was discovered to contain a segmentation fault via LineMerger::GetNextLowpassLine at linemerger.cpp.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00764 · Published 2022-08-18 · No fix listed CWE-119
Priority LOW 30
libjpeg commit 281daa9 was discovered to contain a segmentation fault via HuffmanDecoder::Get at huffmandecoder.hpp.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00764 · Published 2022-08-18 · No fix listed CWE-119
Priority LOW 35
libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0114 · Published 2022-08-18 · No fix listed CWE-835
Priority LOW 25
libjpeg commit 842c7ba was discovered to contain an infinite loop via the component JPEG::ReadInternal.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00296 · Published 2022-08-18 · No fix listed CWE-835
Priority LOW 31
There is an assertion failure in SingleComponentLSScan::ParseMCU in singlecomponentlsscan.cpp in libjpeg before 1.64 via an empty JPEG-LS scan.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00893 · Published 2022-06-10 · No fix listed CWE-617
Priority LOW 31
libjpeg 1.63 has a heap-based buffer over-read in HierarchicalBitmapRequester::FetchRegion in hierarchicalbitmaprequester.cpp because the MCU size can be different between allocation and use.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00939 · Published 2022-05-29 · No fix listed CWE-125
Priority LOW 30
An issue was discovered in libjpeg through 2020021.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00857 · Published 2021-09-20 · No fix listed CWE-476
Priority LOW 30
An issue was discovered in libjpeg through 2020021.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00866 · Published 2021-09-20 · No fix listed CWE-787
Priority LOW 30
An issue was discovered in libjpeg through 2020021.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00856 · Published 2021-09-20 · No fix listed CWE-476
Priority LOW 30
An issue was discovered in libjpeg through 2020021.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00866 · Published 2021-09-20 · No fix listed CWE-476
Priority LOW 30
An issue was discovered in libjpeg through 2020021.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00853 · Published 2021-09-20 · No fix listed CWE-697
Priority LOW 30
An issue was discovered in libjpeg through 2020021.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00853 · Published 2021-09-20 · No fix listed CWE-476
Priority LOW 30
An issue was discovered in libjpeg through 2020021.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00863 · Published 2021-09-20 · No fix listed CWE-476
THREATIST.IORead the docs