CVE-2018-1152: Divide by Zero
Last updated 25 August 2025
Other sources
libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libjpeg-turboto a version that resolves this vulnerability.Fixed in 1:2.1.5-2Fixed in 1:2.1.5-4Fixed in 1:3.1.3-4
Event History
Frequently Asked Questions
What is CVE-2018-1152?
CVE-2018-1152 is a vulnerability in libjpeg-turbo 1.5.90 that can lead to a denial of service by causing a divide by zero when processing a crafted BMP image.
What is the severity of CVE-2018-1152?
CVE-2018-1152 has a severity rating of medium with a CVSS score of 6.5.
Which software versions are affected by CVE-2018-1152?
The affected software versions include libjpeg-turbo 1.5.90.
How can I fix CVE-2018-1152?
To fix CVE-2018-1152, update libjpeg-turbo to version 1.5.2-2+deb10u1, 1.2.0.6-4, or 1.2.1.5-2.
Where can I find more information about CVE-2018-1152?
More information about CVE-2018-1152 can be found at the following references: [1] [2] [3]