CVE-2021-46822
Fixed in a distro release EPSS 1%
The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row function in rdppm.c.
Products: libjpeg-turbo
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 9 | libjpeg-turbo | 2.0.90-6.el9_1 |
| AlmaLinux 9 | libjpeg-turbo-devel | 2.0.90-6.el9_1 |
| AlmaLinux 9 | libjpeg-turbo-utils | 2.0.90-6.el9_1 |
| AlmaLinux 9 | turbojpeg | 2.0.90-6.el9_1 |
| AlmaLinux 9 | turbojpeg-devel | 2.0.90-6.el9_1 |
| Amazon Linux 2 | libjpeg-turbo | 2.0.90-2.amzn2.0.2 |
| Amazon Linux 2 | libjpeg-turbo-devel | 2.0.90-2.amzn2.0.2 |
| Amazon Linux 2 | libjpeg-turbo-utils | 2.0.90-2.amzn2.0.2 |
| Amazon Linux 2 | turbojpeg | 2.0.90-2.amzn2.0.2 |
| Amazon Linux 2 | turbojpeg-devel | 2.0.90-2.amzn2.0.2 |
| Debian 12 | libjpeg-turbo | 1:2.1.1-1 |
| Debian 13 | libjpeg-turbo | 1:2.1.1-1 |
| Debian 14 | libjpeg-turbo | 1:2.1.1-1 |
| Red Hat Enterprise Linux 9 | libjpeg-turbo | 0:2.0.90-6.el9_1 |
| Red Hat Enterprise Linux 9 | libjpeg-turbo-debuginfo | 0:2.0.90-6.el9_1 |
| Red Hat Enterprise Linux 9 | libjpeg-turbo-debugsource | 0:2.0.90-6.el9_1 |
| Red Hat Enterprise Linux 9 | libjpeg-turbo-devel | 0:2.0.90-6.el9_1 |
| Red Hat Enterprise Linux 9 | libjpeg-turbo-utils | 0:2.0.90-6.el9_1 |
| Red Hat Enterprise Linux 9 | libjpeg-turbo-utils-debuginfo | 0:2.0.90-6.el9_1 |
| Red Hat Enterprise Linux 9 | turbojpeg | 0:2.0.90-6.el9_1 |
| Red Hat Enterprise Linux 9 | turbojpeg-debuginfo | 0:2.0.90-6.el9_1 |
| Red Hat Enterprise Linux 9 | turbojpeg-devel | 0:2.0.90-6.el9_1 |
| Rocky Linux 9 | libjpeg-turbo | 0:2.0.90-6.el9_1 |
| Ubuntu 18.04 LTS | libjpeg-turbo | 1.5.2-0ubuntu5.18.04.6 |
| Ubuntu 20.04 LTS | libjpeg-turbo | 2.0.3-0ubuntu1.20.04.3 |