DEBIAN-CVE-2020-14152

DEBIAN-CVE-2020-14152 PUBLISHED CVSS 7.099999904632568 HIGH

In IJG JPEG (aka libjpeg) before 9d, jpeg_mem_available() in jmemnobs.c in djpeg does not honor the max_memory_to_use setting, possibly causing excessive memory consumption.

Risk Scores

CVSS 3.1

7.099999904632568

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Affected Products

Vendor	Product	Versions
Debian:12	libjpeg-turbo	0, 0, 0
Debian:11	libjpeg-turbo	0, 0, 0
Debian:14	libjpeg-turbo	0, 0, 0
Debian:13	libjpeg-turbo	0, 0, 0

Timeline

Jun 15, 2020 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2020-14152 advisory

Open in Interactive Console →