Out-of-Bounds Write Vulnerability in jpeg_encoder Affects Software Performance
CVE-2018-14944

7.8HIGH

Key Information:

Vendor

Jpeg Encoder Project

Status
Jpeg Encoder
Vendor
CVE Published:
5 August 2018

What is CVE-2018-14944?

A vulnerability exists in the jpeg_encoder library, specifically in the readFromBMP function within jpeg_encoder.cpp, leading to an out-of-bounds write condition. This issue may disrupt normal software operations and compromise system stability. Developers using affected versions should review their implementations and apply available fixes to mitigate potential risks. Further details can be found in the issue logs and security resources.

References

https://github.com/thejinchao/jpeg_encoder/issues/4
x_refsource_MISC
https://github.com/fouzhe/security/tree/master/jpeg_encod...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.