libjpeg-turbo kayıtları
libjpeg-turbo üreticisine ait 16 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %93,8
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-476 NULL Pointer Dereference3
- CWE-125 Out-of-bounds Read3
- CWE-787 Out-of-bounds Write3
- CWE-369 Divide By Zero2
- CWE-770 Allocation of Resources Without Limits or Throttling1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
16 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2016-3616İstismar yok | The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or executlibjpeg-turbo · libjpeg-turbo · CWE-476 | Yüksek8,8 | — | %4,2 | 13 Şub 2017 |
36İzleyin | CVE-2020-17541İstismar yok | Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component.libjpeg-turbo · libjpeg-turbo · CWE-787 | Yüksek8,8 | — | %2,7 | 1 Haz 2021 |
36İzleyin | CVE-2018-20330İstismar yok | The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because libjpeg-turbo · libjpeg-turbo · CWE-190 | Yüksek8,8 | — | %2,0 | 21 Ara 2018 |
33İzleyin | CVE-2020-13790İstismar yok | libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.libjpeg-turbo · libjpeg-turbo · CWE-125 | Yüksek8,1 | — | %3,1 | 3 Haz 2020 |
28İzleyin | CVE-2021-29390İstismar yok | libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c.libjpeg-turbo · libjpeg-turbo · CWE-787 | Yüksek7,1 | — | %0,8 | 22 Ağu 2023 |
27İzleyin | CVE-2018-1152İstismar yok | libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image.libjpeg-turbo · libjpeg-turbo · CWE-369 | Orta6,5 | — | %3,2 | 18 Haz 2018 |
27İzleyin | CVE-2014-9092İstismar yok | libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service (crash) via a crafted JPEG file, related to the Exif marker.libjpeg-turbo · libjpeg-turbo · CWE-119 | Orta6,5 | — | %3,2 | 10 Eki 2017 |
27İzleyin | CVE-2018-14498İstismar yok | get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based libjpeg-turbo · libjpeg-turbo · CWE-125 | Orta6,5 | — | %3,0 | 7 Mar 2019 |
27İzleyin | CVE-2017-15232İstismar yok | libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file.libjpeg-turbo · libjpeg-turbo · CWE-476 | Orta6,5 | — | %2,3 | 10 Eki 2017 |
27İzleyin | CVE-2018-19664İstismar yok | libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the put_pixel_rows function in wrbmp.c, as demonstrated by djpeg.libjpeg-turbo · libjpeg-turbo · CWE-125 | Orta6,5 | — | %1,7 | 29 Kas 2018 |
26İzleyin | CVE-2023-2804İstismar yok | A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2_merged_upsample_internal() function of jdmrgext.c file.libjpeg-turbo · libjpeg-turbo · CWE-122 | Orta6,5 | — | %1,2 | 25 May 2023 |
26İzleyin | CVE-2021-20205İstismar yok | Libjpeg-turbo versions 2.0.91 and 2.0.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a cralibjpeg-turbo · libjpeg-turbo · CWE-369 | Orta6,5 | — | %1,1 | 10 Mar 2021 |
23İzleyin | CVE-2013-6629İstismar yok | The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghosgoogle · chrome · CWE-200 | Orta5,0 | — | %9,7 | 19 Kas 2013 |
22İzleyin | CVE-2021-46822İstismar yok | The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer anlibjpeg-turbo · libjpeg-turbo · CWE-787 | Orta5,5 | — | %1,0 | 18 Haz 2022 |
22İzleyin | CVE-2019-13960İstismar yok | In libjpeg-turbo 2.0.2, a large amount of memory can be used during processing of an invalid progressive JPEG image containing incorrect widlibjpeg-turbo · libjpeg-turbo · CWE-770 | Orta5,5 | — | %0,9 | 18 Tem 2019 |
22İzleyin | CVE-2020-35538İstismar yok | A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.libjpeg-turbo · libjpeg-turbo · CWE-476 | Orta5,5 | — | %0,2 | 31 Ağu 2022 |
- CVE-2016-361636İzleyin
The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or execut
YüksekCVSS 8,8İstismar yokEPSS %4libjpeg-turbo · libjpeg-turbo13 Şub 2017
- CVE-2020-1754136İzleyin
Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component.
YüksekCVSS 8,8İstismar yokEPSS %2libjpeg-turbo · libjpeg-turbo1 Haz 2021
- CVE-2018-2033036İzleyin
The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because
YüksekCVSS 8,8İstismar yokEPSS %2libjpeg-turbo · libjpeg-turbo21 Ara 2018
- CVE-2020-1379033İzleyin
libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.
YüksekCVSS 8,1İstismar yokEPSS %3libjpeg-turbo · libjpeg-turbo3 Haz 2020
- CVE-2021-2939028İzleyin
libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c.
YüksekCVSS 7,1İstismar yokEPSS %0libjpeg-turbo · libjpeg-turbo22 Ağu 2023
- CVE-2018-115227İzleyin
libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image.
OrtaCVSS 6,5İstismar yokEPSS %3libjpeg-turbo · libjpeg-turbo18 Haz 2018
- CVE-2014-909227İzleyin
libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service (crash) via a crafted JPEG file, related to the Exif marker.
OrtaCVSS 6,5İstismar yokEPSS %3libjpeg-turbo · libjpeg-turbo10 Eki 2017
- CVE-2018-1449827İzleyin
get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based
OrtaCVSS 6,5İstismar yokEPSS %3libjpeg-turbo · libjpeg-turbo7 Mar 2019
- CVE-2017-1523227İzleyin
libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file.
OrtaCVSS 6,5İstismar yokEPSS %2libjpeg-turbo · libjpeg-turbo10 Eki 2017
- CVE-2018-1966427İzleyin
libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the put_pixel_rows function in wrbmp.c, as demonstrated by djpeg.
OrtaCVSS 6,5İstismar yokEPSS %1libjpeg-turbo · libjpeg-turbo29 Kas 2018
- CVE-2023-280426İzleyin
A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2_merged_upsample_internal() function of jdmrgext.c file.
OrtaCVSS 6,5İstismar yokEPSS %1libjpeg-turbo · libjpeg-turbo25 May 2023
- CVE-2021-2020526İzleyin
Libjpeg-turbo versions 2.0.91 and 2.0.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a cra
OrtaCVSS 6,5İstismar yokEPSS %1libjpeg-turbo · libjpeg-turbo10 Mar 2021
- CVE-2013-662923İzleyin
The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghos
OrtaCVSS 5,0İstismar yokEPSS %9google · chrome19 Kas 2013
- CVE-2021-4682222İzleyin
The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer an
OrtaCVSS 5,5İstismar yokEPSS %1libjpeg-turbo · libjpeg-turbo18 Haz 2022
- CVE-2019-1396022İzleyin
In libjpeg-turbo 2.0.2, a large amount of memory can be used during processing of an invalid progressive JPEG image containing incorrect wid
OrtaCVSS 5,5İstismar yokEPSS %0libjpeg-turbo · libjpeg-turbo18 Tem 2019
- CVE-2020-3553822İzleyin
A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.
OrtaCVSS 5,5İstismar yokEPSS %0libjpeg-turbo · libjpeg-turbo31 Ağu 2022