Wind River Support Network

HomeDefectsLIN9-7855

Fixed

LIN9-7855 : Security Advisory - libjpeg-turbo - CVE-2018-19664

Created: Dec 19, 2018 Updated: Feb 25, 2019

Resolved Date: Feb 20, 2019

Found In Version: 9.0.0.19

Fix Version: 9.0.0.20

Severity: Standard

Applicable for: Wind River Linux 9

Component/s: Userspace

Description

libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the put_pixel_rows function in wrbmp.c, as demonstrated by djpeg.

https://nvd.nist.gov/vuln/detail/CVE-2018-19664

CVEs

CVE-2018-19664