CVE-2020-13790

Published June 3rd, 2020

View on NVD ↗

CVSS v3

8.1

HIGH

CVSS v2

5.8

MEDIUM

Affected

1

PROJECT

Description

libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.

libjpeg-turbo/libjpeg-turbo

Main libjpeg-turbo repository

GitHub

4.33K