CVE-2023-37837: Buffer Overflow
Published Jul 13, 2023
·Updated
libjpeg commit db33a6e was discovered to contain a heap buffer overflow via LineBitmapRequester::EncodeRegion at linebitmaprequester.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.
Affected Software
1 affected component
jpeg libjpeg<1.66
Remediation
Patch Available
Event History
Jul 13, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
11:15 PM
Description
Data Sourced
via NVD·11:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-37837?
CVE-2023-37837 has been identified as a high severity vulnerability due to the potential for Denial of Service (DoS) attacks.
2
How do I fix CVE-2023-37837?
To mitigate CVE-2023-37837, users should update to a version of libjpeg that is greater than 1.66.
3
What causes CVE-2023-37837?
CVE-2023-37837 is caused by a heap buffer overflow in the LineBitmapRequester::EncodeRegion function.
4
Who is affected by CVE-2023-37837?
CVE-2023-37837 affects users and applications that utilize versions of libjpeg up to 1.66.
5
What types of attacks can CVE-2023-37837 facilitate?
CVE-2023-37837 can facilitate Denial of Service (DoS) attacks through the exploitation of crafted files.