[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fV_RzWTbqlvt8YUpRXM3lnDYcy-6gtEbPa-3HU6Wye3I":3,"g5a-risk:CVE-2018-14498":184},{"success":4,"data":5,"meta":182},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":67,"references":68,"referencesCount":112,"weaknesses":113,"weaknessesCount":122,"isActivelyExploited":123,"cisaInfo":15,"otxData":15,"relatedBlogPosts":124,"seoMetadata":125,"configurations":150,"relatedVendorCves":180,"notableEvents":181},"CVE-2018-14498","What is CVE-2018-14498?","get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries.","get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read ...","2019-03-07T23:29:00.487","2023-11-07T02:52:58.227",6.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":31,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":29,"ImpactScore":30},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":27,"BaseScore":12,"BaseSeverity":28,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH","MEDIUM",2.8,3.6,[32],{"Source":18,"Type":19,"CVSSData":33,"BaseSeverity":28,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":4},{"Version":34,"VectorString":35,"AccessVector":22,"AccessComplexity":28,"Authentication":24,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","PARTIAL",4.3,8.6,2.9,0.03092,[40,40,40,40,40,40,40],"Medium",[44,48,52,57,62],{"vendor":45,"product":45,"version":46,"criteria":47,"vulnerable":4},"libjpeg-turbo","*","cpe:2.3:a:libjpeg-turbo:libjpeg-turbo:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":46,"criteria":51,"vulnerable":4},"mozilla","mozjpeg","cpe:2.3:a:mozilla:mozjpeg:*:*:*:*:*:*:*:*",{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"fedoraproject","fedora","28","cpe:2.3:o:fedoraproject:fedora:28:*:*:*:*:*:*:*",{"vendor":58,"product":59,"version":60,"criteria":61,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":63,"product":64,"version":65,"criteria":66,"vulnerable":4},"opensuse","leap","15.0","cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*",5,[69,75,78,82,85,90,94,97,101,104,108],{"url":70,"source":71,"tags":72},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-04\u002Fmsg00015.html","Opensuse",[73,74],"Mailing List","Third Party Advisory",{"url":76,"source":71,"tags":77},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-05\u002Fmsg00015.html",[],{"url":79,"source":80,"tags":81},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:2052","Red Hat",[],{"url":83,"source":80,"tags":84},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:3705",[],{"url":86,"source":87,"tags":88},"https:\u002F\u002Fgithub.com\u002Flibjpeg-turbo\u002Flibjpeg-turbo\u002Fcommit\u002F9c78a04df4e44ef6487eee99c4258397f4fdca55","GitHub",[89,74],"Patch",{"url":91,"source":87,"tags":92},"https:\u002F\u002Fgithub.com\u002Flibjpeg-turbo\u002Flibjpeg-turbo\u002Fissues\u002F258",[93,74],"Exploit",{"url":95,"source":87,"tags":96},"https:\u002F\u002Fgithub.com\u002Fmozilla\u002Fmozjpeg\u002Fissues\u002F299",[93,74],{"url":98,"source":99,"tags":100},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2019\u002F03\u002Fmsg00021.html","Debian",[73,74],{"url":102,"source":99,"tags":103},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2020\u002F07\u002Fmsg00033.html",[],{"url":105,"source":106,"tags":107},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FF7YP4QUEYGHI4Q7GIAVFVKWQ7DJMBYLU\u002F","Fedoraproject",[],{"url":109,"source":110,"tags":111},"https:\u002F\u002Fusn.ubuntu.com\u002F4190-1\u002F","Ubuntu",[],11,[114],{"id":115,"name":116,"description":117,"extendedDescription":118,"status":119,"abstraction":120,"structure":121},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":126,"metaDescription":127,"keywords":128,"canonicalUrl":129,"structuredData":130},"What is CVE-2018-14498? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-14498, a medium severity cyber security vulnerability from 2019. get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 a...","CVE-2018-14498, CVE-2018-14498 vulnerability, CVE-2018-14498 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, libjpeg-turbo security, mozilla security, fedoraproject security, debian security, opensuse security, libjpeg-turbo vulnerability, mozjpeg vulnerability, fedora vulnerability","\u002Fwhat-is\u002Fcve-2018-14498",{"@context":131,"@type":132,"headline":126,"description":127,"datePublished":10,"dateModified":11,"author":133,"publisher":137,"about":141,"mainEntityOfPage":145,"articleSection":148,"keywords":149},"https:\u002F\u002Fschema.org","TechArticle",{"@type":134,"name":135,"url":136},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":134,"name":135,"url":136,"logo":138},{"@type":139,"url":140},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":142,"name":6,"description":143,"additionalType":144},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":146,"@id":147},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-14498","Cybersecurity","CVE-2018-14498, CVE-2018-14498 vulnerability, CVE-2018-14498 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[151,162,168,174],{"Operator":15,"Negate":15,"Nodes":152},[153],{"Operator":154,"Negate":15,"CPEMatch":155},"OR",[156,159],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":157,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":158},"148E14BC-8865-41F9-9704-AC4690C6AD3F","1.5.90",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":160,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":161},"84357B61-BF3B-413A-8F8C-8FAC19F1628C","3.3.1",{"Operator":15,"Negate":15,"Nodes":163},[164],{"Operator":154,"Negate":15,"CPEMatch":165},[166],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":167,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"DC1BD7B7-6D88-42B8-878E-F1318CA5FCAF",{"Operator":15,"Negate":15,"Nodes":169},[170],{"Operator":154,"Negate":15,"CPEMatch":171},[172],{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":173,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Operator":15,"Negate":15,"Nodes":175},[176],{"Operator":154,"Negate":15,"CPEMatch":177},[178],{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":179,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F1E78106-58E6-4D59-990F-75DA575BFAD9",[],[],{"lastModified":11,"cacheTime":183,"version":34},1792358858398,{"score":185,"band":42,"action":186,"scoredAt":187},48,"Plan remediation","2026-10-16T06:45:44.59194+00:00"]