CVE-2018-14498
07.03.2019, 23:29
get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries.Enginsight
| Vendor | Product | Version |
|---|---|---|
| libjpeg-turbo | libjpeg-turbo | 𝑥 ≤ 1.5.90 |
| mozilla | mozjpeg | 𝑥 ≤ 3.3.1 |
| debian | debian_linux | 8.0 |
| opensuse | leap | 15.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libjpeg-turbo |
|
Common Weakness Enumeration
References