Mozilla

Mozjpeg

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.1

CVE-2020-13790

Exploit
  • EPSS 0.67%
  • Published 03.06.2020 19:15:10
  • Last modified 21.11.2024 05:01:51

libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.

6.5

CVE-2018-14498

Exploit
  • EPSS 0.4%
  • Published 07.03.2019 23:29:00
  • Last modified 21.11.2024 03:49:11

get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or more of the color indices is o...