libjpeg
by Thorfdbg
CVEs (10)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-37768 | Hig | 0.49 | 7.5 | 0.01 | Aug 18, 2022 | libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer. | ||
| CVE-2022-37770 | Med | 0.42 | 6.5 | 0.01 | Aug 18, 2022 | libjpeg commit 281daa9 was discovered to contain a segmentation fault via LineMerger::GetNextLowpassLine at linemerger.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file. | ||
| CVE-2021-39520 | Med | 0.42 | 6.5 | 0.01 | Sep 20, 2021 | An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function BlockBitmapRequester::PushReconstructedData() located in blockbitmaprequester.cpp. It allows an attacker to cause Denial of Service. | ||
| CVE-2021-39519 | Med | 0.42 | 6.5 | 0.01 | Sep 20, 2021 | An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function BlockBitmapRequester::PullQData() located in blockbitmaprequester.cpp It allows an attacker to cause Denial of Service. | ||
| CVE-2021-39518 | Med | 0.42 | 6.5 | 0.01 | Sep 20, 2021 | An issue was discovered in libjpeg through 2020021. LineBuffer::FetchRegion() in linebuffer.cpp has a heap-based buffer overflow. | ||
| CVE-2021-39517 | Med | 0.42 | 6.5 | 0.01 | Sep 20, 2021 | An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function BlockBitmapRequester::ReconstructUnsampled() located in blockbitmaprequester.cpp. It allows an attacker to cause Denial of Service. | ||
| CVE-2021-39516 | Med | 0.42 | 6.5 | 0.01 | Sep 20, 2021 | An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function HuffmanDecoder::Get() located in huffmandecoder.hpp. It allows an attacker to cause Denial of Service. | ||
| CVE-2022-32202 | Med | 0.00 | 5.5 | 0.01 | Jun 2, 2022 | In libjpeg 1.63, there is a NULL pointer dereference in LineBuffer::FetchRegion in linebuffer.cpp. | ||
| CVE-2022-31796 | Med | 0.00 | 6.5 | 0.01 | Jun 2, 2022 | libjpeg 1.63 has a heap-based buffer over-read in HierarchicalBitmapRequester::FetchRegion in hierarchicalbitmaprequester.cpp because the MCU size can be different between allocation and use. | ||
| CVE-2022-31620 | Med | 0.00 | 6.5 | 0.01 | May 25, 2022 | In libjpeg before 1.64, BitStream::Get in bitstream.hpp has an assertion failure that may cause denial of service. This is related to out-of-bounds array access during arithmetically coded lossless scan or arithmetically coded sequential scan. |
- risk 0.49cvss 7.5epss 0.01
libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer.
- risk 0.42cvss 6.5epss 0.01
libjpeg commit 281daa9 was discovered to contain a segmentation fault via LineMerger::GetNextLowpassLine at linemerger.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.
- risk 0.42cvss 6.5epss 0.01
An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function BlockBitmapRequester::PushReconstructedData() located in blockbitmaprequester.cpp. It allows an attacker to cause Denial of Service.
- risk 0.42cvss 6.5epss 0.01
An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function BlockBitmapRequester::PullQData() located in blockbitmaprequester.cpp It allows an attacker to cause Denial of Service.
- risk 0.42cvss 6.5epss 0.01
An issue was discovered in libjpeg through 2020021. LineBuffer::FetchRegion() in linebuffer.cpp has a heap-based buffer overflow.
- risk 0.42cvss 6.5epss 0.01
An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function BlockBitmapRequester::ReconstructUnsampled() located in blockbitmaprequester.cpp. It allows an attacker to cause Denial of Service.
- risk 0.42cvss 6.5epss 0.01
An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function HuffmanDecoder::Get() located in huffmandecoder.hpp. It allows an attacker to cause Denial of Service.
- risk 0.00cvss 5.5epss 0.01
In libjpeg 1.63, there is a NULL pointer dereference in LineBuffer::FetchRegion in linebuffer.cpp.
- risk 0.00cvss 6.5epss 0.01
libjpeg 1.63 has a heap-based buffer over-read in HierarchicalBitmapRequester::FetchRegion in hierarchicalbitmaprequester.cpp because the MCU size can be different between allocation and use.
- risk 0.00cvss 6.5epss 0.01
In libjpeg before 1.64, BitStream::Get in bitstream.hpp has an assertion failure that may cause denial of service. This is related to out-of-bounds array access during arithmetically coded lossless scan or arithmetically coded sequential scan.