← Back

Mozjpeg

mozjpeg

Vendor: Mozilla • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-13790
2Libjpeg Turbo
Mozilla
2Libjpeg Turbo
Mozjpeg
Jun 17, 2026
Jun 3, 2020
N/A· v4
8.1 HIGH· v3
5.8 MEDIUM· v2
libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.
CVE-2018-14498
5Debian
FedoraprojectLibjpeg Turbo+2 more
5Debian Linux
FedoraLeap+2 more
Nov 21, 2024
Mar 7, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or...Show more
get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries.Show less