PT-2023-21504 · Unknown+2 · Libjpeg-Turbo+2

Cl3Nn0 · Published 2023-05-25 · Updated 2026-03-05 · CVE-2023-2804

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions libjpeg-turbo (affected versions not specified)

Description A heap-based buffer overflow issue was discovered in the h2v2 merged upsample internal() function of the jdmrgext.c file. The issue can only be exploited with 12-bit data precision when the range of the sample data type exceeds the valid sample range. An attacker could craft a 12-bit lossless JPEG image containing out-of-range 12-bit samples, leading to a segmentation fault or buffer overflow when an application attempts to decompress the image using merged upsampling, causing the application to crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Heap Based Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-122

CWE-787

Related Identifiers

ALT-PU-2023-4129

ALT-PU-2024-1887

BDU:2026-01703

CVE-2023-2804

OPENSUSE-SU-2024:13552-1

Affected Products

Alt Linux

Windows

Libjpeg-Turbo

References · 21

• 🔥 https://github.com/libjpeg-turbo/libjpeg-turbo/issues/675 · Exploit
• 🔥 https://github.com/libjpeg-turbo/libjpeg-turbo/issues/668#issuecomment-1492586118 · Exploit
• https://github.com/libjpeg-turbo/libjpeg-turbo/commit/9f756bc67a84d4566bf74a0c2432aa55da404021 · Patch
• https://bdu.fstec.ru/vul/2026-01703 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2023-2804 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-2804 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-2804 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2804 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-2804 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2208447 · Patch
• https://osv.dev/vulnerability/ALPINE-CVE-2023-2804 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13552-1 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2023-2804 · Note
• https://security.alpinelinux.org/vuln/CVE-2023-2804 · Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01006.html · Note