PT-2016-7967 · Libjpeg Turbo · Libjpeg-Turbo

Published 2016-06-13 · Updated 2016-06-13

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions libjpeg-turbo versions prior to 1.5.0

Description The issue is related to an Out-of-Bounds Read in libjpeg-turbo. This occurs when the software encounters unusually long blocks in MCU.

Recommendations For versions prior to 1.5.0, update to version 1.5.0 or later to resolve the issue.

Related Identifiers

MGASA-2016-0224

Affected Products

Libjpeg-Turbo

References · 5

• https://advisories.mageia.org/MGASA-2016-0224.html · Security Note
• https://osv.dev/vulnerability/MGASA-2016-0224 · Vendor Advisory
• https://docs.google.com/document/d/1uxETuTL7_tVgE8EB49RhxxHuCyDIbcsS9fHNimBixm4/edit · Note
• https://wiki.mozilla.org/images/7/77/Libjpeg-turbo-report.pdf · Note
• https://bugs.mageia.org/show_bug.cgi?id=18677 · Note