VYPR

libjpeg

by IJG JPEG

CVEs (2)

  • CVE-2020-14153HigJun 15, 2020
    risk 0.46cvss 7.1epss 0.01

    In IJG JPEG (aka libjpeg) from version 8 through 9c, jdhuff.c has an out-of-bounds array read for certain table pointers.

  • CVE-2020-14152HigJun 15, 2020
    risk 0.46cvss 7.1epss 0.01

    In IJG JPEG (aka libjpeg) before 9d, jpeg_mem_available() in jmemnobs.c in djpeg does not honor the max_memory_to_use setting, possibly causing excessive memory consumption.