Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Mozjpeg
(Mozilla)| Repositories | https://github.com/libjpeg-turbo/libjpeg-turbo |
| #Vulnerabilities | 2 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2020-06-03 | CVE-2020-13790 | libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file. | Libjpeg\-Turbo, Mozjpeg | 8.1 | ||
| 2019-03-07 | CVE-2018-14498 | get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries. | Debian_linux, Fedora, Libjpeg\-Turbo, Mozjpeg, Leap | 6.5 |