CVE-2023-2804
Fixed in a distro release EPSS 1%CVSS 6.5
A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2_merged_upsample_internal() function of jdmrgext.c file. The vulnerability can only be exploited with 12-bit data precision for which the range of the sample data type exceeds the valid sample range, hence, an attacker could craft a 12-bit lossless JPEG image that contains out-of-range 12-bit samples. An application attempting to decompress such image using merged upsampling would lead to segmentation fault or buffer overflows, causing an application to crash.
Products: libjpeg-turbo
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.18 | libjpeg-turbo | 2.1.5.1-r3 |
| Alpine 3.19 | libjpeg-turbo | 2.1.5.1-r4 |
| Alpine 3.20 | libjpeg-turbo | 2.1.5.1-r4 |
| Alpine 3.21 | libjpeg-turbo | 2.1.5.1-r4 |
| Alpine 3.22 | libjpeg-turbo | 2.1.5.1-r4 |
| Alpine 3.23 | libjpeg-turbo | 2.1.5.1-r4 |
| Alpine 3.24 | libjpeg-turbo | 2.1.5.1-r4 |
| Chainguard | libjpeg-turbo | 2.1.91-r3 |
| Wolfi | libjpeg-turbo | 2.1.91-r3 |
| openSUSE Tumbleweed | libjpeg-turbo | 8.3.2-77.1 |