CVE-2021-29390

Description

References

• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• libjpeg-turbo/libjpeg-turbo · Issue Tracking
• libjpeg-turbo/libjpeg-turbo · Patch
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/27NR3KG553CG6LGPMP6SHWEVHTYPL6RC
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T655QF7CQ3DYAMPFV7IECQYGDEUIVVT
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KUQ7CTX3W372X3UY56VVNAHCH6H2F4X3

Weitere Schwachstellen in libjpeg-turbo

• CVE-2023-2804MITTEL 6.5A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2_merged_upsample_internal() function of jdmrgext.c file. The vulne…
• CVE-2020-35538MITTEL 5.5A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.
• CVE-2021-46822MITTEL 5.5The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer an…
• CVE-2020-17541HOCH 8.8Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A remote attacker can send a malformed jpeg file …
• CVE-2021-20205MITTEL 6.5Libjpeg-turbo versions 2.0.91 and 2.0.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a cra…