debian/jpegoptim vulnerabilities

Latest debian/jpegoptim CVEs

Newest publication first

1. CVE-2023-27781 jpegoptim v1.5.2 was discovered to contain a heap overflow in the optimize function at jpegoptim.c.

   Published 2023-03-15

   High·CVSS 7.8 EPSS 0.39%

   jpegoptim v1.5.2 was discovered to contain a heap overflow in the optimize function at jpegoptim.c.

2. CVE-2022-32325 JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.

   Published 2022-07-01

   Medium·CVSS 6.5 EPSS 0.99%

   JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.

3. CVE-2018-11416 jpegoptim.c in jpegoptim 1.4.5 (fixed in 1.4.6) has an invalid use of realloc() and free(), which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified....

   Published 2018-05-24

   High·CVSS 8.8 EPSS 1.7%

   jpegoptim.c in jpegoptim 1.4.5 (fixed in 1.4.6) has an invalid use of realloc() and free(), which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.