An issue was discovered in libjpeg version 9a. The allocsarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.

References: https://github.com/ChijinZ/securityadvisories/tree/master/libjpeg-v9a

An issue was discovered in libjpeg version 9a. The gettextrgbrow function in rdppm.c allows remote attackers to cause a denial of service (Segmentation fault) via a crafted file.

References: https://github.com/ChijinZ/securityadvisories/tree/master/libjpeg-v9a

An issue was discovered in libjpeg version 9a. The gettextgrayrow function in rdppm.c allows remote attackers to cause a denial of service (Segmentation fault) via a crafted file.

References: https://github.com/ChijinZ/securityadvisories/tree/master/libjpeg-v9a

libjpeg 9c has a large loop because readpixel in rdtarga.c mishandles EOF.

References:

https://github.com/ChijinZ/securityadvisories/blob/master/libjpeg-v9c/mail.pdf https://github.com/ChijinZ/securityadvisories/tree/master/libjpeg-v9c

The libjpeg package contains a library of functions for manipulating JPEGimages. It also contains simple client programs for accessing thelibjpeg functions.An uninitialized memory read issue was found in the way libjpeg decodedimages with missing Start Of Scan (SOS) JPEG markers. A remote attackercould create a specially crafted JPEG image that, when decoded, couldpossibly lead to a disclosure of potentially sensitive information.(CVE-2013-6629)All libjpeg users are advised to upgrade to this updated package, whichcontains a backported patch to correct this issue.