CVE-2021-39516
https://notcve.org/view.php?id=CVE-2021-39516
An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function HuffmanDecoder::Get() located in huffmandecoder.hpp. It allows an attacker to cause Denial of Service. Se ha detectado un problema en libjpeg versiones hasta 2020021. Se presenta una desreferencia de puntero NULL en la función HuffmanDecoder::Get() ubicada en el archivo huffmandecoder.hpp. • https://github.com/thorfdbg/libjpeg/issues/42 • CWE-476: NULL Pointer Dereference •
CVE-2021-39520
https://notcve.org/view.php?id=CVE-2021-39520
An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function BlockBitmapRequester::PushReconstructedData() located in blockbitmaprequester.cpp. It allows an attacker to cause Denial of Service. Se ha detectado un problema en libjpeg versiones hasta 2020021. Se presenta una desreferencia de puntero NULL en la función BlockBitmapRequester::PushReconstructedData() ubicada en el archivo blockbitmaprequester.cpp. • https://github.com/thorfdbg/libjpeg/issues/34 • CWE-476: NULL Pointer Dereference •
CVE-2020-14152
https://notcve.org/view.php?id=CVE-2020-14152
In IJG JPEG (aka libjpeg) before 9d, jpeg_mem_available() in jmemnobs.c in djpeg does not honor the max_memory_to_use setting, possibly causing excessive memory consumption. En IJG JPEG (también se conoce como libjpeg) versiones anteriores a 9d, la función jpeg_mem_available() en el archivo jmemnobs.c en djpeg no respeta la configuración de max_memory_to_use, posiblemente causando un consumo excesivo de memoria • http://www.ijg.org/files/jpegsrc.v9d.tar.gz https://bugs.gentoo.org/727908 https://lists.debian.org/debian-lts-announce/2020/07/msg00033.html • CWE-400: Uncontrolled Resource Consumption •
CVE-2020-14153
https://notcve.org/view.php?id=CVE-2020-14153
In IJG JPEG (aka libjpeg) from version 8 through 9c, jdhuff.c has an out-of-bounds array read for certain table pointers. En IJG JPEG (alias libjpeg) de la versión 8 a la 9c, jdhuff.c tiene un arreglo de lectura fuera de límites para ciertos punteros de mesa • http://www.ijg.org/files/jpegsrc.v9d.tar.gz https://bugs.gentoo.org/727908 https://github.com/libjpeg-turbo/libjpeg-turbo/issues/445 • CWE-125: Out-of-bounds Read •
CVE-2018-11813 – libjpeg: "cjpeg" utility large loop because read_pixel in rdtarga.c mishandles EOF
https://notcve.org/view.php?id=CVE-2018-11813
libjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF. libjpeg 9c tiene un bucle largo debido a que read_pixel en rdtarga.c gestiona EOF de manera incorrecta. • http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00015.html http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00015.html http://www.ijg.org/files/jpegsrc.v9d.tar.gz https://access.redhat.com/errata/RHSA-2019:2052 https://bugs.gentoo.org/727908 https://github.com/ChijinZ/security_advisories/blob/master/libjpeg-v9c/mail.pdf https://github.com/ChijinZ/security_advisories/tree/master/libjpeg-v9c https://access.redhat.com/security/cve/CVE-2018-11813 https:/& • CWE-400: Uncontrolled Resource Consumption CWE-834: Excessive Iteration •