CVE-2023-37836

Vulnerability

A reachable assertion vulnerability exists in libjpeg commit db33a6e within the BitMapHook::BitMapHook constructor in bitmaphook.cpp. The issue is triggered when processing specially crafted JPEG files, causing the application to abort due to an assertion failure. The affected version is the latest commit db33a6e of the libjpeg project [1].

Exploitation

An attacker can trigger this vulnerability by providing a malicious JPEG file to the jpeg encoder tool. The minimal requirement is the ability to supply a crafted file to the encoder; no authentication or special privileges are needed. The crash is observed when running the command ./jpeg -p @@ /dev/null with the crafted input [1].

Impact

Successful exploitation leads to a denial of service (DoS) through an assertion failure, causing the application to crash. The impact is limited to availability; there is no indication of memory corruption or code execution from this specific bug path [1].

Mitigation

No official fix has been released by the vendor as of the publication date (2023-07-13). Users should avoid processing untrusted JPEG files with the affected libjpeg version until a patch is available. The issue is tracked in the project's issue tracker [1].