Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The get_dht function in jdmarker.c in libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48 and other products, does not set all elements of a certain Huffman value array during the reading of segments that follow Define Huffman Table (DHT) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
libjpeg-turbo 内存损坏漏洞
Vulnerability Description
libjpeg是一个包含JPEG解码以及JPEG编码等功能的C语言库。libjpeg-turbo是libjpeg的一个优化改进版本。 Google Chrome 31.0.1650.48之前的版本中使用的libjpeg-turbo库1.3.0及之前的版本中的jdmarker.c文件中的‘get_dht’函数中存在安全漏洞，该漏洞源于当处理Huffman表时，libjpeg-turbo库使用未初始化的内存。远程攻击者可借助特制的JPEG图像利用该漏洞从未初始化内存位置获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A