Описание
libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palette through tj3LoadImage12() or tj3LoadImage16() using the default pixel format, the application may trigger a division-by-zero in alloc_sarray(), causing a SIGFPE and denial of service.
A flaw was found in libjpeg-turbo. This vulnerability, located in the PNG image loader, allows a remote attacker to trigger a denial of service (DoS). By processing a specially crafted indexed-color PNG image, an integer division-by-zero error can occur, leading to application instability and crashes.
Отчет
This vulnerability is rated Moderate because exploitation is limited to process denial of service and requires an application to parse indexed-color PNG images using specialized 12-bit or 16-bit TurboJPEG APIs. Standard JPEG decoding workflows and common library functions do not invoke this code path. Because the integer division-by-zero results in a floating-point exception crash without compromising confidentiality or integrity, the overall impact is restricted to application termination.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Hardened Images | libjpeg-turbo | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
5.5 Medium
CVSS3
Связанные уязвимости
libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palette through tj3LoadImage12() or tj3LoadImage16() using the default pixel format, the application may trigger a division-by-zero in alloc_sarray(), causing a SIGFPE and denial of service.
libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palette through tj3LoadImage12() or tj3LoadImage16() using the default pixel format, the application may trigger a division-by-zero in alloc_sarray(), causing a SIGFPE and denial of service.
libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability ...
libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palette through tj3LoadImage12() or tj3LoadImage16() using the default pixel format, the application may trigger a division-by-zero in alloc_sarray(), causing a SIGFPE and denial of service.
ALT-PU-2026-20346: package `libjpeg8` update to version 3.2.1-alt1
EPSS
5.5 Medium
CVSS3