CVE-2018-19664

libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the put_pixel_rows function in wrbmp.c, as demonstrated by djpeg

published November 29, 2018

CVSS
—
EPSS
2%
Percentile
77.0
In the wild
Unconfirmed
What it is

libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the put_pixel_rows function in wrbmp.c, as demonstrated by djpeg.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01707 · 77.0th percentile
Published
2018-11-29T07:00Z
EPSS history
Timeline
  • 29 NOV 07:00Z
    libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the put_pixel_rows function in wrbmp.c, as demonstrated by djpeg
    cvelistv5