Libjpeg Turbo
Approved changes feed: RSS · Atom
cpe:2.3:a:libjpeg-turbo:libjpeg-turbo:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Libjpeg Turbo (7cd72dca-911c-5c6a-bfe0-e21a12392cba) |
|---|---|
| Product | Libjpeg Turbo (939e3cc2-e95f-58d4-865b-32b16b9cc62f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libjpeg-turbo |
purl2cpe | 2026-06-01 10:14:03.043628 |
pkg:deb/ubuntu/libjpeg-turbo |
purl2cpe | 2026-06-01 10:14:03.043630 |
pkg:github/libjpeg-turbo/libjpeg-turbo |
purl2cpe | 2026-06-01 10:14:03.043632 |
pkg:gitlab/redhat/libjpeg-turbo |
purl2cpe | 2026-06-01 10:14:03.043633 |
pkg:rpm/centos/libjpeg-turbo |
purl2cpe | 2026-06-01 10:14:03.043634 |
pkg:rpm/fedora/libjpeg-turbo |
purl2cpe | 2026-06-01 10:14:03.043636 |
pkg:rpm/opensuse/libjpeg-turbo |
purl2cpe | 2026-06-01 10:14:03.043637 |
pkg:sourceforge/libjpeg-turbo |
purl2cpe | 2026-06-01 10:14:03.043638 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-46822 |
vulnerable | 2026-06-08 05:38:06.077766 |
Details available
The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row function in rdppm.c.
Published: 2022-06-18T15:27:44.000Z
Updated: 2024-08-04T05:17:42.633Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-17541 |
vulnerable | 2026-06-08 05:20:56.791564 |
Details available
Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A remote attacker can send a malformed jpeg file to the service and cause arbitrary code execution or denial of service of the target service.
Published: 2021-06-01T14:44:41.000Z
Updated: 2024-08-04T14:00:48.686Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14498 |
vulnerable | 2026-06-08 05:10:52.994416 |
Details available
get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries.
Published: 2019-03-07T22:00:00.000Z
Updated: 2024-08-05T09:29:51.678Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9092 |
vulnerable | 2026-06-08 05:06:10.880364 |
Details available
libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service (crash) via a crafted JPEG file, related to the Exif marker.
Published: 2017-10-10T13:00:00.000Z
Updated: 2024-08-06T13:33:13.553Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6629 |
vulnerable | 2026-06-08 05:04:57.287537 |
Details available
The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.
Published: 2013-11-15T20:00:00.000Z
Updated: 2024-08-06T17:46:22.170Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.