Wind River Support Network

HomeDefectsLIN1018-3224

Fixed

LIN1018-3224 : Security Advisory - libjpeg-turbo - CVE-2018-19664

Created: Dec 19, 2018 Updated: Jan 23, 2019

Resolved Date: Jan 10, 2019

Found In Version: unknown

Fix Version: 10.18.44.3

Severity: Standard

Applicable for: Wind River Linux LTS 18

Component/s: Userspace

Description

libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the put_pixel_rows function in wrbmp.c, as demonstrated by djpeg.

https://nvd.nist.gov/vuln/detail/CVE-2018-19664

CVEs

CVE-2018-19664