CVE-2023-2804

Katalog CVE

CVSS 6.5 · Medium EPSS 1,2%

Kerentanan Heap-based Buffer Overflow pada libjpeg-turbo. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2_merged_upsample_internal() function of jdmrgext.c file. The vulnerability can only be exploited with 12-bit data precision for which the range of the sample data type exceeds the valid sample range, hence, an attacker could craft a 12-bit lossless JPEG image that contains out-of-range 12-bit samples. An application attempting to decompress such image using merged upsampling would lead to segmentation fault or buffer overflows, causing an application to crash.

Rincian

Terbit di NVD

25 Mei 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-122: Heap-based Buffer Overflow
CWE-787: Out-of-bounds Write

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 67,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=2208447 issue tracking · patch
• https://github.com/libjpeg-turbo/libjpeg-turbo/commit/9f756bc67a84d4566bf74a0c2432aa55da404021 patch
• https://github.com/libjpeg-turbo/libjpeg-turbo/issues/668#issuecomment-1492586118 exploit · issue tracking · patch
• https://github.com/libjpeg-turbo/libjpeg-turbo/issues/675 exploit · issue tracking · patch
• https://access.redhat.com/security/cve/CVE-2023-2804 advisory pihak ketiga
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01006.html