libjpeg commit db33a6e was discovered to contain a heap buffer overflow via LineBitmapRequester::EncodeRegion at linebitmaprequester.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.
References
| Link | Resource |
|---|---|
| https://github.com/thorfdbg/libjpeg/issues/87#BUG0 | Exploit Issue Tracking Patch Third Party Advisory |
Configurations
History
27 Jul 2023, 15:00
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Jpeg libjpeg
Jpeg |
|
| References | (MISC) https://github.com/thorfdbg/libjpeg/issues/87#BUG0 - Exploit, Issue Tracking, Patch, Third Party Advisory | |
| CWE | CWE-787 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| CPE | cpe:2.3:a:jpeg:libjpeg:*:*:*:*:*:*:*:* |
13 Jul 2023, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-07-13 23:15
Updated : 2024-02-28 20:33
NVD link : CVE-2023-37837
Mitre link : CVE-2023-37837
CVE.ORG link : CVE-2023-37837
JSON object : View
Products Affected
jpeg
- libjpeg
CWE
CWE-787
Out-of-bounds Write