Heap-based Buffer Overflow in jpeg_encoder Product by Fouzhe
CVE-2018-14945

7.8HIGH

Key Information:

Vendor

Jpeg Encoder Project

Status
Jpeg Encoder
Vendor
CVE Published:
5 August 2018

What is CVE-2018-14945?

The jpeg_encoder product by Fouzhe is susceptible to a heap-based buffer overflow vulnerability in the readFromBMP function located in jpeg_encoder.cpp. This issue can lead to potential memory corruption, with attackers potentially exploiting this flaw to execute arbitrary code. It's crucial for users to apply necessary updates and follow security best practices to mitigate risks associated with this vulnerability.

References

https://github.com/fouzhe/security/tree/master/jpeg_encod...
x_refsource_MISC
https://github.com/thejinchao/jpeg_encoder/issues/6
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.