Search

Search is not available in local development.
Run npx pagefind --site __site after building to enable it.

JLSEC-2025-177 Medium 6.5

libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the `put_pixel_rows` function in wrbmp.c,...

Source Edit History OSV JSON (OSV)

JLSEC Published: Oct 21, 2025
Modified: Jul 23, 2026
Severity: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected Packages: JpegTurbo_jll < 2.1.0+0
Upstream: CVE-2018-19664

libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the put_pixel_rows function in wrbmp.c, as demonstrated by djpeg.

References