Описание
libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.
A vulnerability was found in libjpeg-turbo, where a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.
Отчет
This vulnerability is rated as a moderate because a heap-based buffer over-read exists in the get_rgb_row() function within rdppm.c when processing a malformed PPM input file, this issue may lead to information leakage or crashes, it does not inherently allow code execution or privilege escalation.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | libjpeg-turbo | Out of support scope | ||
| Red Hat Enterprise Linux 7 | libjpeg-turbo | Will not fix | ||
| Red Hat Enterprise Linux 8 | libjpeg-turbo | Fixed | RHSA-2025:7540 | 14.05.2025 |
Показывать по
Дополнительная информация
Статус:
EPSS
8.1 High
CVSS3
Связанные уязвимости
libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.
libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.
libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-r ...
EPSS
8.1 High
CVSS3