PT-2019-6238 · Libjpeg Turbo+3 · Libjpeg-Turbo+3

Published 2019-07-05 · Updated 2022-06-02 · CVE-2019-2201

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 10

Description The issue is related to a possible out of bounds write due to a missing bounds check in the generate jsimd ycc rgb convert neon function of jsimd arm64 neon.S. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is required for exploitation. The vulnerability is also associated with incorrect compression/unpacking of gigapixel images in the Libjpeg-turbo library, allowing a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. The vulnerability can cause an integer overflow and subsequent heap corruption when processing specially crafted JPEG files.

Recommendations For Android versions 8.0 through 10, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2022-05875

CVE-2019-2201

DLA-3037-1

MGASA-2019-0329

OPENSUSE-SU-2019:2529-1

OPENSUSE-SU-2019:2530-1

OPENSUSE-SU-2019_2529-1

OPENSUSE-SU-2019_2530-1

SUSE-SU-2019:2971-1

SUSE-SU-2019:2971-2

SUSE-SU-2019:2972-1

SUSE-SU-2019_2971-1

SUSE-SU-2019_2971-2

SUSE-SU-2019_2972-1

USN-4190-1

Affected Products

Android

Libjpeg-Turbo

Suse

Ubuntu

References · 49

• https://nvd.nist.gov/vuln/detail/CVE-2019-2201 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2019:2530-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-19664 · Vendor Advisory
• https://source.android.com/security/bulletin/2019-11-01 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y4QPASQPZO644STRFTLOD35RIRGWWRNI · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:2972-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-20330 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-2201 · Security Note
• https://ubuntu.com/security/notices/USN-4190-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4190-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00048.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2019:2529-1 · Vendor Advisory
• https://security.gentoo.org/glsa/202003-23 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20220829SE16 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-2201 · Vendor Advisory