libjpeg-turbo
3 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-2804 | Fixed in libjpeg-turbo v3.0 (beta2) | A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2_merged_upsample_internal() function of jdmrgext.c file. The vulne | MEDIUM 6.5 | 1.2 % | ||
| CVE-2020-35538 | libjpeg-turbo 2.0.5 onwards | A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo. | MEDIUM 5.5 | 0.3 % | ||
| CVE-2021-20205 | 2.0.90 and 2.0.91 | Libjpeg-turbo versions 2.0.91 and 2.0.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a cra | MEDIUM 6.5 | 1.2 % |