PatchTheCVEijg vulnerabilities
Recent CVEs affecting ijg products. 2 tracked.
ijg has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2020-06-15. Highest priority: CVE-2020-14152 (score 48/100).
- CVE-2020-14153 HIGH 7.1 UPGRADE In IJG JPEG (aka libjpeg) from version 8 through 9c, jdhuff.c has an out-of-bounds array read for certain tabl
- CVE-2020-14152 HIGH 7.1 UPGRADE MITIGATE In IJG JPEG (aka libjpeg) before 9d, jpeg_mem_available() in jmemnobs.c in djpeg does not honor the max_memory
FAQ
How do I fix ijg vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ijg being exploited right now?
None of the tracked ijg CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ijg CVE should I patch first?
CVE-2020-14152 currently ranks highest (48/100): In IJG JPEG (aka libjpeg) before 9d, jpeg_mem_available() in jmemnobs.c in djpeg does not honor the max_memory.