libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libjpeg-turbo-develUpgrade turbojpegUpgrade libjpeg-turbo-utilsUpgrade libjpeg-turboUpgrade turbojpeg-devel | May 8, 2024 | Aug 22, 2023 |
| Amazon Linux Ami 2 | — | Upgrade libjpeg-turboUpgrade turbojpeg-develUpgrade libjpeg-turbo-utilsUpgrade libjpeg-turbo-develUpgrade libjpeg-turbo-debuginfoUpgrade turbojpeg | Sep 21, 2023 | Aug 22, 2023 |
| Oracle_linux | — | Upgrade turbojpegUpgrade libjpeg-turboUpgrade libjpeg-turbo-develUpgrade turbojpeg-develUpgrade libjpeg-turbo-utils | May 15, 2024 | Aug 22, 2023 |
| Redhat_linux | — | Upgrade libjpeg-turbo-debuginfoUpgrade libjpeg-turbo-debugsourceNo solution existsUpgrade turbojpeg-debuginfoUpgrade libjpeg-turbo-utilsUpgrade libjpeg-turboUpgrade libjpeg-turbo-develUpgrade turbojpegUpgrade turbojpeg-develUpgrade libjpeg-turbo-utils-debuginfo | May 1, 2024 | Aug 22, 2023 |
| Rocky_linux | — | Upgrade libjpeg-turboUpgrade turbojpeg-develUpgrade turbojpeg-debuginfoUpgrade libjpeg-turbo-utils-debuginfoUpgrade libjpeg-turbo-debugsourceUpgrade libjpeg-turbo-utilsUpgrade libjpeg-turbo-develUpgrade turbojpegUpgrade libjpeg-turbo-debuginfo | May 13, 2024 | Aug 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub