Libjpeg Turbo is a widely embedded JPEG compression library that, despite a narrow product scope, achieves prominence through deep integration in imaging, web, and multimedia applications across operating systems and platforms. The vendor's disclosure history reflects the parsing and codec complexity inherent to image-processing libraries, where the core attack surface centers on untrusted image data handling. Current exploitation activity and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Libjpeg Turbo over time
Signals from CVEs in this vendor scope (16 CVEs).
16 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2016-3616HIGH The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or execute arbitrary code via a crafted file. | Feb 13, 2017 | 8.8 | 29 | NO | NO |
CVE-2018-20330HIGH The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mi | Dec 21, 2018 | 8.8 | 27 | NO | NO |
CVE-2020-17541HIGH Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A remote attacker can send a malformed jpeg file to the service and cause arbitrary code | Jun 1, 2021 | 8.8 | 24 | NO | NO |
CVE-2018-14498MEDIUM get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) | Mar 7, 2019 | 6.5 | 23 | NO | NO |
CVE-2018-1152MEDIUM libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image. | Jun 18, 2018 | 6.5 | 23 | NO | NO |
CVE-2021-29390HIGH libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c. | Aug 22, 2023 | 7.1 | 22 | NO | NO |
CVE-2018-19664MEDIUM libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the put_pixel_rows function in wrbmp.c, as demonstrated by djpeg. | Nov 29, 2018 | 6.5 | 22 | NO | NO |
CVE-2017-15232MEDIUM libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file. | Oct 11, 2017 | 6.5 | 22 | NO | NO |
CVE-2023-2804MEDIUM A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2_merged_upsample_internal() function of jdmrgext.c file. The vulnerability can only be exploited with 12-b | May 25, 2023 | 6.5 | 21 | NO | NO |
CVE-2020-35538MEDIUM A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo. | Aug 31, 2022 | 5.5 | 21 | NO | NO |
Signals from CVEs in this vendor scope (16 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Libjpeg Turbo.
Media articles that mention a CVE ID that affects a product developed by Libjpeg Turbo — matched by CVE ID, not by vendor name.