Description
libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palette through tj3LoadImage12() or tj3LoadImage16() using the default pixel format, the application may trigger a division-by-zero in alloc_sarray(), causing a SIGFPE and denial of service.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | libjpeg9 +2 | No fix yet | — |
| Ubuntu 24.04 LTS | libjpeg-turbo | No fix yet | — |
| Ubuntu 20.04 LTS | libjpeg9 +2 | No fix yet | — |
| Ubuntu 18.04 LTS | libjpeg9 +2 | No fix yet | — |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 16.04 LTS | libjpeg9 +2 | No fix yet | — |
| Ubuntu Pro 14.04 LTS | libjpeg6b +1 | No fix yet | — |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | libjpeg-turbo | 8.3.2-86.1 | openSUSE-SU-2026:12399-1 |
Advisories 1
- openSUSE-SU-2026:12399-1 libjpeg-turbo-3.2.1-86.1 on GA media SUSE / openSUSE Security Updates · Nov 4, 2026