VDB

CVE-2018-10126

CVE-2018-10126 PUBLISHED

ijg-libjpeg before 9d, as used in tiff2pdf (from LibTIFF) and other products, does not check for a NULL pointer at a certain place in jpeg_fdct_16x16 in jfdctint.c.

EPSS 0.64% · 71.0th percentile

Risk Scores

EPSS Score
0.64%
71.0th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSlibjpeg6b0, 1:6b2-3
Ubuntu:18.04:LTSlibjpeg6b0, 1:6b2-3
Ubuntu:18.04:LTSlibjpeg90, 1:9b-2
Ubuntu:Pro:14.04:LTSlibjpeg6b6b1-4ubuntu1, *, 6b1-4ubuntu1+esm1
Ubuntu:22.04:LTSlibjpeg91:9d-1, 0
Ubuntu:22.04:LTSlibjpeg-turbo2.0.6-0ubuntu2, 0, 2.0.6-0ubuntu3
Ubuntu:24.04:LTSlibjpeg90, 1:9e-1build1, 1:9e-1
Ubuntu:24.04:LTSlibjpeg6b0, 1:6b2-3.1
Ubuntu:25.10libjpeg90, 1:9f-2
Ubuntu:24.04:LTSlibjpeg-turbo2.1.5-2ubuntu2, 0, 2.1.5-2ubuntu1
Ubuntu:Pro:16.04:LTSlibjpeg-turbo1.4.2-0ubuntu2, 0, 1.4.2-0ubuntu1
Ubuntu:20.04:LTSlibjpeg90, 1:9d-1, 1:9c-2
Ubuntu:Pro:14.04:LTSlibjpeg-turbo1.3.0-0ubuntu1, 0, *
Ubuntu:Pro:16.04:LTSlibjpeg91:9b-1ubuntu1, *, 1:9b-1ubuntu1+esm1
Ubuntu:20.04:LTSlibjpeg-turbo2.0.3-0ubuntu1.20.04.3, 0, 2.0.3-0ubuntu1
Ubuntu:18.04:LTSlibjpeg-turbo1.5.2-0ubuntu5.18.04.1, 1.5.2-0ubuntu5.18.04.3, 1.5.2-0ubuntu5.18.04.4
Ubuntu:22.04:LTSlibjpeg6b0, 1:6b2-3
Ubuntu:25.10libjpeg6b0, 1:6b2-4
Ubuntu:25.10libjpeg-turbo2.1.5-4ubuntu2, 2.1.5-3ubuntu2, 0
Ubuntu:Pro:16.04:LTSlibjpeg6b1:6b2-2, *, 0

Exploit Intelligence

Timeline

  • Apr 21, 2018 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 24, 2021 EPSS Score
  • Oct 26, 2021 EPSS Score
  • Dec 27, 2021 EPSS Score
  • Feb 28, 2022 EPSS Score
  • May 2, 2022 EPSS Score
  • Jul 3, 2022 EPSS Score
  • Sep 5, 2022 EPSS Score
  • Nov 6, 2022 EPSS Score
  • Jan 8, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›