
tjko/jpegoptim
Releases44
Frequency7 months 3 weeks
Last Release
Stars1.79K
jpegoptim - utility to optimize/compress JPEG files
CVE History
| CVE | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|
| 7.8 HIGH | — | ||
jpegoptim v1.5.2 was discovered to contain a heap overflow in the optimize function at jpegoptim.c. | |||
| 6.5 MEDIUM | 4.3 MEDIUM | ||
JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c. | |||
| — | 6.8 MEDIUM | ||
jpegoptim.c in jpegoptim 1.4.5 (fixed in 1.4.6) has an invalid use of realloc() and free(), which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact. | |||