libjpeg-turbo
3 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-2804 | Fixed in libjpeg-turbo v3.0 (beta2) | A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2_merged_upsample_internal() function of jdmrgext.c file. The vulne | MEDIUM 6.5 | 1.2 % | ||
| CVE-2020-35538 | libjpeg-turbo 2.0.5 onwards | A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo. | MEDIUM 5.5 | 0.3 % | ||
| CVE-2021-20205 | 2.0.90 and 2.0.91 | Libjpeg-turbo versions 2.0.91 and 2.0.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a cra | MEDIUM 6.5 | 1.2 % |