libjpeg-turbo: CVE-2020-13790 #2190
Labels
aosa-pending
Pending AOSA (AOSC OS Security Advisory) assignment
security
Topic/issue involves a security issue/fixed
CVE IDs: CVE-2020-13790
Other security advisory IDs: USN-4386-1
Description: libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.
Patches: rdppm.c: Fix buf overrun caused by bad binary PPM
PoC(s): Heap-based buffer over-read in get_rgb_row() in rdppm.c
Architectural progress:
amd64
optenv32
arm64
The text was updated successfully, but these errors were encountered: