PT-2020-13896 · Independent Jpeg · Libjpeg

Published 2020-06-15 · Updated 2020-06-25 · CVE-2020-14151

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions libjpeg versions prior to 9d

Description The issue in libjpeg, specifically in the cjpeg component, involves the read * pixel() function in rdtarga.c mishandling the End Of File (EOF), which can lead to unexpected behavior.

Recommendations For versions prior to 9d, update to version 9d or later to resolve the issue.

Fix

Related Identifiers

CVE-2020-14151

Affected Products

Libjpeg

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2020-14151 · Security Note
• https://ubuntu.com/security/CVE-2020-14151 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-14151 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-14151 · Vendor Advisory
• http://ijg.org/files/jpegsrc.v9d.tar.gz · Note
• https://t.me/cvenotify/4380 · Telegram Post