Medium severity6.5NVD Advisory· Published May 16, 2018· Updated Jun 17, 2026
CVE-2018-11212
CVE-2018-11212
Description
An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
109- osv-coords108 versionspkg:apk/chainguard/openjdk-11-openj9pkg:apk/chainguard/openjdk-11-openj9-dbgpkg:apk/chainguard/openjdk-11-openj9-default-jdkpkg:apk/chainguard/openjdk-11-openj9-default-jvmpkg:apk/chainguard/openjdk-11-openj9-default-policypkg:apk/chainguard/openjdk-11-openj9-docpkg:apk/chainguard/openjdk-11-openj9-jmodspkg:apk/chainguard/openjdk-11-openj9-jrepkg:apk/chainguard/openjdk-17-openj9pkg:apk/chainguard/openjdk-17-openj9-dbgpkg:apk/chainguard/openjdk-17-openj9-default-jdkpkg:apk/chainguard/openjdk-17-openj9-default-jvmpkg:apk/chainguard/openjdk-17-openj9-default-policypkg:apk/chainguard/openjdk-17-openj9-docpkg:apk/chainguard/openjdk-17-openj9-jmodspkg:apk/chainguard/openjdk-17-openj9-jrepkg:apk/chainguard/openjdk-21-openj9pkg:apk/chainguard/openjdk-21-openj9-dbgpkg:apk/chainguard/openjdk-21-openj9-default-jdkpkg:apk/chainguard/openjdk-21-openj9-default-jvmpkg:apk/chainguard/openjdk-21-openj9-default-policypkg:apk/chainguard/openjdk-21-openj9-docpkg:apk/chainguard/openjdk-21-openj9-jmodspkg:apk/chainguard/openjdk-21-openj9-jrepkg:apk/chainguard/openjdk-25-openj9-jmodspkg:apk/chainguard/openjdk-26-openj9-jrepkg:apk/chainguard/openjdk-8-openj9pkg:apk/chainguard/openjdk-8-openj9-dbgpkg:apk/chainguard/openjdk-8-openj9-default-jdkpkg:apk/chainguard/openjdk-8-openj9-default-jvmpkg:apk/chainguard/openjdk-8-openj9-docpkg:apk/chainguard/openjdk-8-openj9-jrepkg:rpm/opensuse/java-11-openjdk&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/java-13-openjdk&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/java-15-openjdk&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/java-1_8_0-openjdk&distro=openSUSE%20Leap%2015.0pkg:rpm/opensuse/java-1_8_0-openjdk&distro=openSUSE%20Tumbleweedpkg:rpm/suse/java-1_7_0-ibm&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Enterprise%20Storage%204pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSSpkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSSpkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSSpkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20OpenStack%20Cloud%207pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Enterprise%20Storage%204pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSSpkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSSpkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSSpkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20OpenStack%20Cloud%207pkg:rpm/suse/java-1_8_0-ibm&distro=HPE%20Helion%20OpenStack%208pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Enterprise%20Storage%204pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Enterprise%20Storage%205pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP1pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSSpkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSSpkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCLpkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSSpkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20OpenStack%20Cloud%207pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20OpenStack%20Cloud%208pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Enterprise%20Storage%204pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSSpkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSSpkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20OpenStack%20Cloud%207
< 0.53.0-r0+ 107 more
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.59.0-r1
- (no CPE)range: < 0.59.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 11.0.12.0-3.1
- (no CPE)range: < 13.0.8.0-3.1
- (no CPE)range: < 15.0.4.0-2.1
- (no CPE)range: < 1.8.0.201-lp150.2.12.1
- (no CPE)range: < 1.8.0.302-2.2
- (no CPE)range: < 1.7.0_sr10.40-65.35.1
- (no CPE)range: < 1.7.0.221-43.22.1
- (no CPE)range: < 1.7.0.221-43.22.1
- (no CPE)range: < 1.7.0.221-43.22.1
- (no CPE)range: < 1.7.0.221-43.22.1
- (no CPE)range: < 1.7.0.221-43.22.1
- (no CPE)range: < 1.7.0.221-43.22.1
- (no CPE)range: < 1.7.0.221-43.22.1
- (no CPE)range: < 1.7.0.221-43.22.1
- (no CPE)range: < 1.7.0.221-43.22.1
- (no CPE)range: < 1.7.0.221-43.22.1
- (no CPE)range: < 1.7.0.221-43.22.1
- (no CPE)range: < 1.7.0.221-43.22.1
- (no CPE)range: < 1.7.0.221-43.22.1
- (no CPE)range: < 1.7.0.221-43.22.1
- (no CPE)range: < 1.7.1_sr4.40-38.34.1
- (no CPE)range: < 1.7.1_sr4.40-26.36.1
- (no CPE)range: < 1.7.1_sr4.40-38.34.1
- (no CPE)range: < 1.7.1_sr4.40-38.34.1
- (no CPE)range: < 1.7.1_sr4.40-38.34.1
- (no CPE)range: < 1.7.1_sr4.40-38.34.1
- (no CPE)range: < 1.7.1_sr4.40-38.34.1
- (no CPE)range: < 1.7.1_sr4.40-38.34.1
- (no CPE)range: < 1.7.1_sr4.40-26.36.1
- (no CPE)range: < 1.7.1_sr4.40-38.34.1
- (no CPE)range: < 1.7.1_sr4.40-38.34.1
- (no CPE)range: < 1.7.1_sr4.40-38.34.1
- (no CPE)range: < 1.7.1_sr4.40-38.34.1
- (no CPE)range: < 1.7.1_sr4.40-26.36.1
- (no CPE)range: < 1.7.1_sr4.40-38.34.1
- (no CPE)range: < 1.7.1_sr4.40-38.34.1
- (no CPE)range: < 1.7.1_sr4.40-38.34.1
- (no CPE)range: < 1.8.0_sr5.40-30.54.1
- (no CPE)range: < 1.8.0_sr5.30-30.46.1
- (no CPE)range: < 1.8.0_sr5.40-30.54.1
- (no CPE)range: < 1.8.0_sr5.30-3.16.2
- (no CPE)range: < 1.8.0_sr5.40-3.24.1
- (no CPE)range: < 1.8.0_sr5.30-30.46.1
- (no CPE)range: < 1.8.0_sr5.30-30.46.1
- (no CPE)range: < 1.8.0_sr5.30-30.46.1
- (no CPE)range: < 1.8.0_sr5.30-30.46.1
- (no CPE)range: < 1.8.0_sr5.40-30.54.1
- (no CPE)range: < 1.8.0_sr5.40-30.54.1
- (no CPE)range: < 1.8.0_sr5.30-30.46.1
- (no CPE)range: < 1.8.0_sr5.40-30.54.1
- (no CPE)range: < 1.8.0_sr5.30-30.46.1
- (no CPE)range: < 1.8.0_sr5.30-30.46.1
- (no CPE)range: < 1.8.0_sr5.30-30.46.1
- (no CPE)range: < 1.8.0_sr5.30-30.46.1
- (no CPE)range: < 1.8.0_sr5.40-30.54.1
- (no CPE)range: < 1.8.0_sr5.30-30.46.1
- (no CPE)range: < 1.8.0_sr5.30-30.46.1
- (no CPE)range: < 1.8.0_sr5.40-30.54.1
- (no CPE)range: < 1.8.0_sr5.30-30.46.1
- (no CPE)range: < 1.8.0_sr5.40-30.54.1
- (no CPE)range: < 1.8.0_sr5.40-30.54.1
- (no CPE)range: < 1.8.0.212-27.32.1
- (no CPE)range: < 1.8.0.212-27.32.1
- (no CPE)range: < 1.8.0.212-27.32.1
- (no CPE)range: < 1.8.0.201-3.16.1
- (no CPE)range: < 1.8.0.201-3.16.1
- (no CPE)range: < 1.8.0.212-27.32.1
- (no CPE)range: < 1.8.0.212-27.32.1
- (no CPE)range: < 1.8.0.212-27.32.1
- (no CPE)range: < 1.8.0.212-27.32.1
- (no CPE)range: < 1.8.0.212-27.32.1
- (no CPE)range: < 1.8.0.212-27.32.1
- (no CPE)range: < 1.8.0.212-27.32.1
- (no CPE)range: < 1.8.0.212-27.32.1
- (no CPE)range: < 1.8.0.212-27.32.1
- (no CPE)range: < 1.8.0.212-27.32.1
Patches
Vulnerability mechanics
References
20- security.netapp.com/advisory/ntap-20190118-0001/nvdPatchThird Party Advisory
- www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.htmlnvdPatchThird Party Advisory
- github.com/ChijinZ/security_advisories/tree/master/libjpeg-v9anvdExploitThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2019-03/msg00028.htmlnvdMailing ListThird Party Advisory
- www.securityfocus.com/bid/106583nvdThird Party AdvisoryVDB Entry
- access.redhat.com/errata/RHSA-2019:0469nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2019:0472nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2019:0473nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2019:0474nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2019:0640nvdThird Party Advisory
- lists.debian.org/debian-lts-announce/2019/01/msg00015.htmlnvdThird Party Advisory
- usn.ubuntu.com/3706-1/nvdThird Party Advisory
- usn.ubuntu.com/3706-2/nvdThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2019-06/msg00013.htmlnvd
- www.ijg.orgnvd
- access.redhat.com/errata/RHSA-2019:1238nvd
- access.redhat.com/errata/RHSA-2019:2052nvd
- support.hpe.com/hpsc/doc/public/displaynvd
- www.oracle.com/security-alerts/cpuapr2022.htmlnvd
News mentions
0No linked articles in our index yet.