REDHAT-BUG-1687424: Medium severity libjpeg-turbo-devel vulnerability
get8bitrow in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries.
Upstream patch: https://github.com/libjpeg-turbo/libjpeg-turbo/commit/9c78a04df4e44ef6487eee99c4258397f4fdca55
Upstream issue: https://github.com/libjpeg-turbo/libjpeg-turbo/issues/258
References: https://github.com/mozilla/mozjpeg/issues/299
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1687424?
The severity of REDHAT-BUG-1687424 is categorized as a denial of service vulnerability that can cause application crashes.
How do I fix REDHAT-BUG-1687424?
To fix REDHAT-BUG-1687424, update libjpeg-turbo to version 1.5.91 or later and MozJPEG to version 3.3.2 or later.
What software is affected by REDHAT-BUG-1687424?
REDHAT-BUG-1687424 affects libjpeg-turbo versions up to 1.5.90 and MozJPEG versions up to 3.3.1.
What type of attack can be executed using REDHAT-BUG-1687424?
An attacker can exploit REDHAT-BUG-1687424 to cause heap-based buffer over-reads leading to application crashes.
What mitigations are recommended for REDHAT-BUG-1687424?
It is recommended to validate BMP files to ensure that color indices are within permitted ranges before processing.