VDB

GCVE-VVD-MAGEIA-2019-132

GCVE-VVD-MAGEIA-2019-132
Advisory Published
Vulnetix · Advisory published September 21, 2019
get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries. (CVE-2018-14498)

Affected Products

VendorProductVersionsPlatforms
Mageiaethtool0 (affected), 5.2-1.mga7 (unaffected)
Mageialibjpeg0 (affected), 1.5.1-1.3.mga6 (unaffected), 0 (affected), 1.5.1-1.3.mga6 (unaffected)

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›