Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
libjpeg-turbo 缓冲区错误漏洞
Vulnerability Description
libjpeg是一个包含JPEG解码以及JPEG编码等功能的C语言库。libjpeg-turbo是libjpeg的一个优化改进版本。 libjpeg-turbo 2.0.1版本中的‘tjLoadImage’函数存在整数溢出漏洞。攻击者可借助BMP图像利用该漏洞造成基于堆的缓冲区溢出。
CVSS Information
N/A
Vulnerability Type
N/A