Unrated
libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the put_pixel_rows function in wrbmp.c, as demonstrated by djpeg.
CVE-2018-19664
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2018-19664 libjpeg-turbo Fixed in: 2.0.2-r0
References
- report github.com
- web usn.ubuntu.com