Lucene search

K
redhatcveRedhat.comRH:CVE-2018-20330
HistoryJan 10, 2019 - 5:50 p.m.

CVE-2018-20330

2019-01-1017:50:30
redhat.com
access.redhat.com
10

0.003 Low

EPSS

Percentile

69.8%

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench.