CVE-2018-10126
CVE-2018-10126
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
ijg-libjpeg before 9d, as used in tiff2pdf (from LibTIFF) and other products, does not check for a NULL pointer at a certain place in jpeg_fdct_16x16 in jfdctint.c.
CVSS 6.5 · Medium · EPSS 1.8%
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
tiff Debian:12
- Versions
- 4.5.0-6
- 4.5.0-6+deb12u1
- 4.5.0-6+deb12u2
- 4.5.0-6+deb12u3
- 4.5.0-6+deb12u4
- 4.5.1+git230720-1
- 4.5.1+git230720-2
- 4.5.1+git230720-3
- 4.5.1+git230720-4
- 4.5.1+git230720-5
- 4.5.1-1
- 4.5.1~rc3-1
- 4.6.0-1
- 4.6.0-2
- 4.7.0-1
- 4.7.0-2
- 4.7.0-3
- 4.7.0-4
- 4.7.0-5
- 4.7.1-1
- 4.7.1-2
- 4.7.1-3
- 4.7.2-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tiff Debian:13
- Versions
- 4.7.0-3
- 4.7.0-3+deb13u1
- 4.7.0-3+deb13u2
- 4.7.0-3+deb13u3
- 4.7.0-4
- 4.7.0-5
- 4.7.1-1
- 4.7.1-2
- 4.7.1-3
- 4.7.2-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tiff Debian:14
- Versions
- 4.7.0-3
- 4.7.0-4
- 4.7.0-5
- 4.7.1-1
- 4.7.1-2
- 4.7.1-3
- 4.7.2-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg-turbo Ubuntu:Pro:14.04:LTS
- Versions
- 1.3.0-0ubuntu1
- 1.3.0-0ubuntu2
- 1.3.0-0ubuntu2.1
- 1.3.0-0ubuntu2.1+esm1
- 1.3.0-0ubuntu2.1+esm2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg6b Ubuntu:Pro:14.04:LTS
- Versions
- 6b1-3ubuntu1
- 6b1-4ubuntu1
- 6b1-4ubuntu1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg-turbo Ubuntu:Pro:16.04:LTS
- Versions
- 1.3.0-0ubuntu2
- 1.4.2-0ubuntu1
- 1.4.2-0ubuntu2
- 1.4.2-0ubuntu3
- 1.4.2-0ubuntu3.1
- 1.4.2-0ubuntu3.3
- 1.4.2-0ubuntu3.4
- 1.4.2-0ubuntu3.4+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg6b Ubuntu:Pro:16.04:LTS
- Versions
- 1:6b2-2
- 1:6b2-2ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg9 Ubuntu:Pro:16.04:LTS
- Versions
- 1:9a-2ubuntu1
- 1:9b-1
- 1:9b-1ubuntu1
- 1:9b-1ubuntu1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg-turbo Ubuntu:18.04:LTS
- Versions
- 1.5.2-0ubuntu5
- 1.5.2-0ubuntu5.18.04.1
- 1.5.2-0ubuntu5.18.04.3
- 1.5.2-0ubuntu5.18.04.4
- 1.5.2-0ubuntu5.18.04.6
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg6b Ubuntu:18.04:LTS
- Versions
- 1:6b2-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg9 Ubuntu:18.04:LTS
- Versions
- 1:9b-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg-turbo Ubuntu:20.04:LTS
- Versions
- 2.0.3-0ubuntu1
- 2.0.3-0ubuntu1.20.04.1
- 2.0.3-0ubuntu1.20.04.3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg6b Ubuntu:20.04:LTS
- Versions
- 1:6b2-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg9 Ubuntu:20.04:LTS
- Versions
- 1:9c-2
- 1:9d-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg-turbo Ubuntu:22.04:LTS
- Versions
- 2.0.6-0ubuntu2
- 2.0.6-0ubuntu3
- 2.1.1-0ubuntu1
- 2.1.2-0ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg6b Ubuntu:22.04:LTS
- Versions
- 1:6b2-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg9 Ubuntu:22.04:LTS
- Versions
- 1:9d-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg-turbo Ubuntu:24.04:LTS
- Versions
- 2.1.5-2ubuntu1
- 2.1.5-2ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg6b Ubuntu:24.04:LTS
- Versions
- 1:6b2-3.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg9 Ubuntu:24.04:LTS
- Versions
- 1:9e-1
- 1:9e-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg-turbo Ubuntu:25.10
- Versions
- 2.1.5-3ubuntu2
- 2.1.5-4ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg6b Ubuntu:25.10
- Versions
- 1:6b2-4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg9 Ubuntu:25.10
- Versions
- 1:9f-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published