PT-2021-4486 · Unknown · Libjpeg-Turbo

Published 2021-09-01 · Updated 2021-09-01

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions libjpeg-turbo (affected versions not specified)

Description The issue is related to the tjInitDecompress() function in the libjpeg-turbo library, which is used for image processing. It involves pointer dereference errors. An attacker, acting remotely, could exploit this issue to impact the availability of protected information by consuming excessive memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-465

Related Identifiers

BDU:2021-05120

Affected Products

Libjpeg-Turbo

References · 4

• https://bdu.fstec.ru/vul/2021-05120 · Security Note
• https://github.com/libjpeg-turbo/libjpeg-turbo · Note
• https://cure53.de/pentest-report_libjpeg-turbo.pdf · Note
• https://libjpeg-turbo.org · Note