Alpine/libjpeg-turbo: medium 6.5
A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2_merged_upsample_internal() function of jdmrgext.c file. The vulnerability can only be exploited with 12-bit data precision fo
Action: Upgrade libjpeg-turbo to 2.1.5.1-r4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.5.1-r4 | - |
Fixed versions
| 2.1.5.1-r4 |
Sources
- osv: ALPINE-CVE-2023-2804#Alpine:v3.21/libjpeg-turbo
- https://security.alpinelinux.org/vuln/CVE-2023-2804
published · modified · JSON