Wind River Support Network

HomeDefectsLIN10-5155

Fixed

LIN10-5155 : Security Advisory - libjpeg-turbo - CVE-2018-19664

Created: Dec 19, 2018 Updated: Feb 11, 2019

Resolved Date: Jan 27, 2019

Found In Version: 10.17.41.1

Fix Version: 10.17.41.14

Severity: Standard

Applicable for: Wind River Linux LTS 17

Component/s: Userspace

Description

libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the put_pixel_rows function in wrbmp.c, as demonstrated by djpeg.

https://nvd.nist.gov/vuln/detail/CVE-2018-19664

CVEs

CVE-2018-19664