Unscored DLA-2302-1 4 CVEs

libjpeg-turbo - security update

Published Jul 31, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	libjpeg-turbo	1:1.5.1-2+deb9u1

Vulnerabilities 4

Unscored —

CVE-2018-1152

libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a cr…

Tenable libjpeg-turbo libjpeg-turbo libjpeg-turbo Debian Ubuntu Alpine

Jun 18, 2018
Unscored —

CVE-2018-14498

get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of…

libjpeg-turbo libjpeg-turbo libjpeg-turbo Debian Ubuntu Alpine

Mar 7, 2019
Unscored —

CVE-2020-13790

libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed P…

libjpeg-turbo libjpeg-turbo libjpeg-turbo Debian Ubuntu Alpine

Jun 3, 2020
Unscored —

CVE-2020-14152

In IJG JPEG (aka libjpeg) before 9d, jpeg_mem_available() in jmemnobs.c in djpeg does not honor the max_memory_to_use s…

fltk libjpeg-turbo libjpeg-turbo libjpeg6b Debian Ubuntu Azure Linux

Jun 15, 2020