jpegoptim project records

3 published records for vendor jpegoptim project.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
36Monitor	CVE-2018-11416No exploit	jpegoptim.c in jpegoptim 1.4.5 (fixed in 1.4.6) has an invalid use of realloc() and free(), which allows remote attackers to cause a denial jpegoptim project · jpegoptim · CWE-415 Pre-auth Memory safety	High8.8	—	1.8%	May 24, 2018
31Monitor	CVE-2023-27781No exploit	jpegoptim v1.5.2 was discovered to contain a heap overflow in the optimize function at jpegoptim.c.jpegoptim project · jpegoptim · CWE-787 Memory safety	High7.8	—	0.4%	Mar 15, 2023
26Monitor	CVE-2022-32325No exploit	JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.jpegoptim project · jpegoptim · CWE-125 Pre-auth Memory safety Denial of service	Medium6.5	—	1.0%	Jul 1, 2022

CVE-2018-11416
36Monitor
jpegoptim.c in jpegoptim 1.4.5 (fixed in 1.4.6) has an invalid use of realloc() and free(), which allows remote attackers to cause a denial
HighCVSS 8.8No exploitEPSS 2%
- Pre-auth
- Memory safety
jpegoptim project · jpegoptimMay 24, 2018
CVE-2023-27781
31Monitor
jpegoptim v1.5.2 was discovered to contain a heap overflow in the optimize function at jpegoptim.c.
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
jpegoptim project · jpegoptimMar 15, 2023
CVE-2022-32325
26Monitor
JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.
MediumCVSS 6.5No exploitEPSS 1%
jpegoptim project · jpegoptimJul 1, 2022