Alpine/libjpeg-turbo: medium 6.5

libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the put_pixel_rows function in wrbmp.c, as demonstrated by djpeg.

Action: Upgrade libjpeg-turbo to 2.0.2-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2018-19664#Alpine:v3.16/libjpeg-turbo
• https://security.alpinelinux.org/vuln/CVE-2018-19664

published 2018-11-29T08:29:00.347Z · modified 2026-10-23T17:17:55.238763853Z · JSON