[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwu0TojbmWlp-8KBUEvBO_L3oBCiiuboiZInv5Br2fmE":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":19,"kevVulnerabilities":80,"topProductsByCves":81,"seoMetadata":83,"meta":92},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":18},17642,"libjpeg-turbo",1,16,0,50,"2023-08-22","l",[16],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},103572,"Libjpeg-turbo is a technology vendor with 1 tracked product and 16 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[20,29,37,43,48,55,60,65,70,75],{"cveId":21,"description":22,"publishedDate":23,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":28},"CVE-2013-6629","The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.","2013-11-19",5,"v2","Medium",false,0.0973,{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":27,"epssScore":36},"CVE-2016-3616","The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or execute arbitrary code via a crafted file.","2017-02-13",8.8,"v3.0","High",0.04393,{"cveId":38,"description":39,"publishedDate":40,"cvssScore":41,"cvssVersion":34,"severity":26,"isKev":27,"epssScore":42},"CVE-2018-1152","libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image.","2018-06-18",6.5,0.03401,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":41,"cvssVersion":34,"severity":26,"isKev":27,"epssScore":47},"CVE-2014-9092","libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service (crash) via a crafted JPEG file, related to the Exif marker.","2017-10-10",0.03235,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"cvssVersion":53,"severity":35,"isKev":27,"epssScore":54},"CVE-2020-13790","libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.","2020-06-03",8.1,"v3.1",0.03178,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":41,"cvssVersion":34,"severity":26,"isKev":27,"epssScore":59},"CVE-2018-14498","get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries.","2019-03-07",0.03092,{"cveId":61,"description":62,"publishedDate":63,"cvssScore":33,"cvssVersion":53,"severity":35,"isKev":27,"epssScore":64},"CVE-2020-17541","Libjpeg-turbo all version have a stack-based buffer overflow in the \"transform\" component. A remote attacker can send a malformed jpeg file to the service and cause arbitrary code execution or denial of service of the target service.","2021-06-01",0.02728,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":41,"cvssVersion":34,"severity":26,"isKev":27,"epssScore":69},"CVE-2017-15232","libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file.","2017-10-11",0.02365,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":27,"epssScore":74},"CVE-2018-20330","The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench.","2018-12-21",0.02006,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":41,"cvssVersion":34,"severity":26,"isKev":27,"epssScore":79},"CVE-2018-19664","libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the put_pixel_rows function in wrbmp.c, as demonstrated by djpeg.","2018-11-29",0.01707,[],[82],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},{"title":84,"metaDescription":85,"keywords":86,"structuredData":87},"Libjpeg-turbo - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Libjpeg-turbo covering 1 product with 16 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Libjpeg-turbo vulnerabilities, Libjpeg-turbo security, Libjpeg-turbo CVE, Libjpeg-turbo threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":88,"@type":89,"name":90,"description":85,"url":91},"https:\u002F\u002Fschema.org","Organization","Libjpeg-turbo","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Flibjpeg-turbo",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":93,"apiVersion":94},"2026-10-18T18:50:27.622Z","3.0"]