Jpegoptim Project Jpegoptim vulnerabilities

3 known vulnerabilities affecting jpegoptim_project/jpegoptim.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH2MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2023-27781HIGHCVSS 7.8v1.5.22023-03-15

CVE-2023-27781 [HIGH] CWE-787 CVE-2023-27781: jpegoptim v1.5.2 was discovered to contain a heap overflow in the optimize function at jpegoptim.c. jpegoptim v1.5.2 was discovered to contain a heap overflow in the optimize function at jpegoptim.c.

CVE-2022-32325MEDIUMCVSS 6.5v1.4.72022-07-01

CVE-2022-32325 [MEDIUM] CWE-125 CVE-2022-32325: JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.

CVE-2018-11416HIGHCVSS 8.8v1.4.52018-05-24

CVE-2018-11416 [HIGH] CWE-415 CVE-2018-11416: jpegoptim.c in jpegoptim 1.4.5 (fixed in 1.4.6) has an invalid use of realloc() and free(), which al jpegoptim.c in jpegoptim 1.4.5 (fixed in 1.4.6) has an invalid use of realloc() and free(), which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.