VDB
BDU%3A2025-16160
BDU%3A2025-16160
PUBLISHED
CVSS 8.5 HIGH
Уязвимость decompress_smooth_data() библиотеки для работы с изображениями libjpeg-turbo, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
8.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fedora Project, ООО «НЦПР», Independent JPEG Group | Fedora, МСВСфера, libjpeg-turbo |
Timeline
- Dec 22, 2025 CVE Published
References
- https://github.com/libjpeg-turbo/libjpeg-turbo/commits/main/jdcoefct.c url
- https://github.com/libjpeg-turbo/libjpeg-turbo/blob/4e52b66f342a803d3b8099b79607e3158d3a241c/jdcoefct.c#L595 url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/27NR3KG553CG6LGPMP6SHWEVHTYPL6RC/ url
- https://errata.msvsphere-os.ru/definition/9/INFCSA-2024:2295?lang=ru url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KUQ7CTX3W372X3UY56VVNAHCH6H2F4X3/ url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T655QF7CQ3DYAMPFV7IECQYGDEUIVVT/ url