CVE-2026-75466: Libjpeg-turbo vulnerability
libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palette through tj3LoadImage12() or tj3LoadImage16() using the default pixel format, the application may trigger a division-by-zero in allocsarray(), causing a SIGFPE and denial of service.
Affected Software
Event History
Frequently Asked Questions
Which application code paths are exposed?
Applications are exposed when they process PNG images through tj3LoadImage12() or tj3LoadImage16(). The affected input is an indexed-color PNG with a non-gray palette.
Is a specially malformed PNG required to trigger the issue?
No. The issue can be triggered by a valid indexed-color PNG image with a non-gray palette when the affected APIs use the default pixel format.
What is the observable impact if the vulnerability is triggered?
The application may encounter a division-by-zero in alloc_sarray(), resulting in SIGFPE and a denial of service.