Alpine/libjpeg-turbo: medium 6.5

libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file.

Action: Upgrade libjpeg-turbo to 1.5.3-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2017-15232#Alpine:v3.6/libjpeg-turbo
• https://security.alpinelinux.org/vuln/CVE-2017-15232

published 2017-10-11T03:29:00.197Z · modified 2026-06-15T18:24:25.760943066Z · JSON