Описание
In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-120551338
A vulnerability was found in libjpeg-turbo that could allow a remote attacker to execute arbitrary code on the system, which is caused by an integer overflow, which leads to subsequent heap corruption.
Отчет
This vulnerability is rated as a moderate, due to a missing bounds check in generate_jsimd_ycc_rgb_convert_neon within jsimd_arm64_neon.S, which could cause an out-of-bounds write, this could result in remote code execution, it requires user interaction (such as opening a crafted file) for exploitation, achieving successful exploitation is difficult and depends on specific conditions.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | libjpeg-turbo | Out of support scope | ||
| Red Hat Enterprise Linux 7 | libjpeg-turbo | Will not fix | ||
| Red Hat Enterprise Linux 8 | libjpeg-turbo | Will not fix | ||
| Red Hat Enterprise Linux 8 | mingw-libjpeg-turbo | Will not fix | ||
| Red Hat Enterprise Linux 9 | libjpeg-turbo | Not affected |
Показывать по
Дополнительная информация
Статус:
7.8 High
CVSS3
Связанные уязвимости
In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-120551338
In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-120551338
In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is ...
7.8 High
CVSS3