CVE-2020-14152 PUBLISHED

In IJG JPEG (aka libjpeg) before 9d, jpeg_mem_available() in jmemnobs.c in djpeg does not honor the max_memory_to_use setting, possibly causing excessive memory consumption.

EPSS 1.17% · 78.5th percentile

Risk Scores

EPSS Score
1.17%
78.5th percentile

Affected Products

VendorProductVersions
Ubuntu:24.04:LTSlibjpeg6b1:6b2-3.1, 0
Ubuntu:Pro:16.04:LTSlibjpeg6b1:6b2-2, 0
Ubuntu:Pro:14.04:LTSlibjpeg-turbo1.3.0-0ubuntu2.1+esm1, 0, 1.3.0-0ubuntu1
Ubuntu:25.10libjpeg6b0, 1:6b2-4
Ubuntu:22.04:LTSlibjpeg6b1:6b2-3, 0
Ubuntu:20.04:LTSlibjpeg6b0, 1:6b2-3
Ubuntu:18.04:LTSlibjpeg6b1:6b2-3, 0
Ubuntu:Pro:16.04:LTSlibjpeg-turbo1.3.0-0ubuntu2, 1.4.2-0ubuntu1, 1.4.2-0ubuntu2
Ubuntu:Pro:14.04:LTSlibjpeg6b0, 6b1-3ubuntu1, 6b1-4ubuntu1
Ubuntu:18.04:LTSlibjpeg91:9b-2, 0
Ubuntu:Pro:16.04:LTSlibjpeg91:9a-2ubuntu1, 1:9b-1, 0

Timeline

References

Open in Interactive Console →