High severity7.1NVD Advisory· Published Aug 22, 2023· Updated Jun 17, 2026
CVE-2021-29390
CVE-2021-29390
Description
libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
112.0.90+ 2 more
- (no CPE)range: 2.0.90
- cpe:2.3:a:libjpeg-turbo:libjpeg-turbo:2.0.90:*:*:*:*:*:*:*
- (no CPE)
- osv-coords5 versionspkg:rpm/almalinux/libjpeg-turbopkg:rpm/almalinux/libjpeg-turbo-develpkg:rpm/almalinux/libjpeg-turbo-utilspkg:rpm/almalinux/turbojpegpkg:rpm/almalinux/turbojpeg-devel
< 2.0.90-7.el9+ 4 more
- (no CPE)range: < 2.0.90-7.el9
- (no CPE)range: < 2.0.90-7.el9
- (no CPE)range: < 2.0.90-7.el9
- (no CPE)range: < 2.0.90-7.el9
- (no CPE)range: < 2.0.90-7.el9
cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
6- github.com/libjpeg-turbo/libjpeg-turbo/commits/main/jdcoefct.cnvdPatch
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingPermissions Required
- github.com/libjpeg-turbo/libjpeg-turbo/blob/4e52b66f342a803d3b8099b79607e3158d3a241c/jdcoefct.cnvdIssue Tracking
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/27NR3KG553CG6LGPMP6SHWEVHTYPL6RC/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T655QF7CQ3DYAMPFV7IECQYGDEUIVVT/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KUQ7CTX3W372X3UY56VVNAHCH6H2F4X3/nvd
News mentions
0No linked articles in our index yet.