Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In libjpeg-turbo 2.0.2, a large amount of memory can be used during processing of an invalid progressive JPEG image containing incorrect width and height values in the image header. NOTE: the vendor's expectation, for use cases in which this memory usage would be a denial of service, is that the application should interpret libjpeg warnings as fatal errors (aborting decompression) and/or set limits on resource consumption or image sizes
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
libjpeg 资源管理错误漏洞
Vulnerability Description
libjpeg是一款用于处理JPEG格式图像数据的C语言库。该产品包括JPEG解码、JPEG编码和其他JPEG功能。libjpeg-turbo是libjpeg的一个优化改进版本。 libjpeg-turbo 2.0.2版本中存在安全漏洞。攻击者可通过发送图像头中带有不正确长度和宽度的无效的渐进式JPEG图像利用该漏洞造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A