vulnerability

Red Hat: CVE-2021-29390: libjpeg-turbo: heap-buffer-overflow vulnerability in decompress_smooth_data in jdcoefct.c (Multiple Advisories)

Severity
9
CVSS
(AV:N/AC:L/Au:N/C:P/I:N/A:C)
Published
08/22/2023
Added
05/01/2024
Modified
09/03/2024

Description

libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c.

Solution(s)

redhat-upgrade-libjpeg-turboredhat-upgrade-libjpeg-turbo-debuginforedhat-upgrade-libjpeg-turbo-debugsourceredhat-upgrade-libjpeg-turbo-develredhat-upgrade-libjpeg-turbo-utilsredhat-upgrade-libjpeg-turbo-utils-debuginforedhat-upgrade-turbojpegredhat-upgrade-turbojpeg-debuginforedhat-upgrade-turbojpeg-devel
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.