High severity · published Jun 6, 2018
CVE-2018-11813
libjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF
7.5
CVSS
3.1%
EPSS
No
On KEV
Description
libjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Libjpeg · Ijg
9c · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-11813
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-11813
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00015.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00015.html
www.ijg.org
http://www.ijg.org/files/jpegsrc.v9d.tar.gz
access.redhat.com
https://access.redhat.com/errata/RHSA-2019:2052
bugs.gentoo.org
https://bugs.gentoo.org/727908
Mailing List
https://github.com/ChijinZ/security_advisories/blob/master/libjpeg-v9c/mail.pdf
More from Libjpeg
7.1
CVE-2020-14153
In IJG JPEG (aka libjpeg) from version 8 through 9c, jdhuff.c has an out-of-bounds array read for certain table pointers
7.1
CVE-2020-14152
In IJG JPEG (aka libjpeg) before 9d, jpeg_mem_available() in jmemnobs.c in djpeg does not honor the max_memory_to_use setting, possibly causing excessive memory consumption
6.5
CVE-2018-11214
An issue was discovered in libjpeg 9a
6.5
CVE-2018-11213
An issue was discovered in libjpeg 9a
6.5
CVE-2018-11212
An issue was discovered in libjpeg 9a and 9d