Approved changes feed: RSS · Atom

cpe:2.3:a:libjpeg-turbo:libjpeg-turbo:2.0.1:*:*:*:*:*:*:*

part: a version: 2.0.1 update: *

VendorLibjpeg Turbo (7cd72dca-911c-5c6a-bfe0-e21a12392cba)
ProductLibjpeg Turbo (939e3cc2-e95f-58d4-865b-32b16b9cc62f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libjpeg-turbo purl2cpe 2026-06-01 10:14:03.043920
pkg:deb/ubuntu/libjpeg-turbo purl2cpe 2026-06-01 10:14:03.043922
pkg:github/libjpeg-turbo/libjpeg-turbo purl2cpe 2026-06-01 10:14:03.043923
pkg:gitlab/redhat/libjpeg-turbo purl2cpe 2026-06-01 10:14:03.043924
pkg:rpm/centos/libjpeg-turbo purl2cpe 2026-06-01 10:14:03.043926
pkg:rpm/fedora/libjpeg-turbo purl2cpe 2026-06-01 10:14:03.043927
pkg:rpm/opensuse/libjpeg-turbo purl2cpe 2026-06-01 10:14:03.043928
pkg:sourceforge/libjpeg-turbo purl2cpe 2026-06-01 10:14:03.043930

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-20330 vulnerable 2026-06-08 05:11:26.951138 Details available
The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench.
Published: 2018-12-21T09:00:00.000Z
Updated: 2024-08-05T11:58:18.787Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19664 vulnerable 2026-06-08 05:11:16.000480 Details available
libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the put_pixel_rows function in wrbmp.c, as demonstrated by djpeg.
Published: 2018-11-29T07:00:00.000Z
Updated: 2024-08-05T11:44:19.396Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.