p PatchFirst

PatchFirst · Свежие уязвимости

Уязвимости libjpeg

За последние 30 дней в libjpeg опубликовано уязвимостей: 0; в каталоге KEV: 0.

Фильтры уязвимостей
Сбросить фильтры

Уязвимостей: 18

  1. CVE-2023-37837

    Средний · CVSS 6.5EPSS 0,59%Есть исправление

    CVE-2023-37837

    libjpeg commit db33a6e was discovered to contain a heap buffer overflow via LineBitmapRequester::EncodeRegion at linebitmaprequester.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.

    • Обновитесь до 0.0~git20241105.c719010-1
    Опубликовано Обновлено
  2. CVE-2023-37836

    Средний · CVSS 6.5EPSS 0,6%Есть исправление

    CVE-2023-37836

    libjpeg commit db33a6e was discovered to contain a reachable assertion via BitMapHook::BitMapHook at bitmaphook.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.

    • Обновитесь до 0.0~git20241105.c719010-1
    Опубликовано Обновлено
  3. CVE-2022-37770

    Средний · CVSS 6.5EPSS 0,74%Есть исправление

    CVE-2022-37770

    libjpeg commit 281daa9 was discovered to contain a segmentation fault via LineMerger::GetNextLowpassLine at linemerger.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.

    • Обновитесь до 0.0~git20220805.54ec643-1
    Опубликовано Обновлено
  4. CVE-2022-37769

    Средний · CVSS 6.5EPSS 0,74%Есть исправление

    CVE-2022-37769

    libjpeg commit 281daa9 was discovered to contain a segmentation fault via HuffmanDecoder::Get at huffmandecoder.hpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.

    • Обновитесь до 0.0~git20220805.54ec643-1
    Опубликовано Обновлено
  5. CVE-2022-32978

    Средний · CVSS 6.5EPSS 0,88%Есть исправление

    CVE-2022-32978

    There is an assertion failure in SingleComponentLSScan::ParseMCU in singlecomponentlsscan.cpp in libjpeg before 1.64 via an empty JPEG-LS scan.

    • Обновитесь до 0.0~git20220615.842c7ba-1
  6. CVE-2022-31796

    Средний · CVSS 6.5EPSS 0,94%Есть исправление

    CVE-2022-31796

    libjpeg 1.63 has a heap-based buffer over-read in HierarchicalBitmapRequester::FetchRegion in hierarchicalbitmaprequester.cpp because the MCU size can be different between allocation and use.

    • Обновитесь до 0.0~git20220615.842c7ba-1
  7. CVE-2022-31620

    Средний · CVSS 6.5EPSS 1,43%Есть исправление

    CVE-2022-31620

    In libjpeg before 1.64, BitStream<false>::Get in bitstream.hpp has an assertion failure that may cause denial of service. This is related to out-of-bounds array access during arithmetically coded lossless scan or arithmetically coded sequential scan.

    • Обновитесь до 0.0~git20220615.842c7ba-1
  8. CVE-2021-39515

    Средний · CVSS 6.5EPSS 0,86%Есть исправление

    CVE-2021-39515

    An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function SampleInterleavedLSScan::ParseMCU() located in sampleinterleavedlsscan.cpp. It allows an attacker to cause Denial of Service.

    • Обновитесь до 0.0~git20200925.f145908-1
    Опубликовано Обновлено
  9. CVE-2021-39517

    Средний · CVSS 6.5EPSS 0,86%Есть исправление

    CVE-2021-39517

    An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function BlockBitmapRequester::ReconstructUnsampled() located in blockbitmaprequester.cpp. It allows an attacker to cause Denial of Service.

    • Обновитесь до 0.0~git20200925.f145908-1
    Опубликовано Обновлено
  10. CVE-2021-39519

    Средний · CVSS 6.5EPSS 0,87%Есть исправление

    CVE-2021-39519

    An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function BlockBitmapRequester::PullQData() located in blockbitmaprequester.cpp It allows an attacker to cause Denial of Service.

    • Обновитесь до 0.0~git20200925.f145908-1
    Опубликовано Обновлено
  11. CVE-2021-39514

    Средний · CVSS 6.5EPSS 0,85%Есть исправление

    CVE-2021-39514

    An issue was discovered in libjpeg through 2020021. An uncaught floating point exception in the function ACLosslessScan::ParseMCU() located in aclosslessscan.cpp. It allows an attacker to cause Denial of Service.

    • Обновитесь до 0.0~git20200925.f145908-1
    Опубликовано Обновлено
  12. CVE-2021-39516

    Средний · CVSS 6.5EPSS 0,85%Есть исправление

    CVE-2021-39516

    An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function HuffmanDecoder::Get() located in huffmandecoder.hpp. It allows an attacker to cause Denial of Service.

    • Обновитесь до 0.0~git20200925.f145908-1
    Опубликовано Обновлено
  13. CVE-2021-39520

    Средний · CVSS 6.5EPSS 0,86%Есть исправление

    CVE-2021-39520

    An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function BlockBitmapRequester::PushReconstructedData() located in blockbitmaprequester.cpp. It allows an attacker to cause Denial of Service.

    • Обновитесь до 0.0~git20200925.f145908-1
    Опубликовано Обновлено

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →