CVE-2026-75466
CVE-2026-75466
This page contains facts from public vulnerability sources. Check the original advisory before updating.
libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palette through tj3LoadImage12() or tj3LoadImage16() using the default pixel format, the application may trigger a division-by-zero in alloc_sarray(), causing a SIGFPE and denial of service.
CVSS 6.5 · Medium · EPSS 0.4%
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
libjpeg-turbo Ubuntu:Pro:14.04:LTS
- Versions
- 1.3.0-0ubuntu1
- 1.3.0-0ubuntu2
- 1.3.0-0ubuntu2.1
- 1.3.0-0ubuntu2.1+esm1
- 1.3.0-0ubuntu2.1+esm2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg6b Ubuntu:Pro:14.04:LTS
- Versions
- 6b1-3ubuntu1
- 6b1-4ubuntu1
- 6b1-4ubuntu1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg-turbo Ubuntu:Pro:16.04:LTS
- Versions
- 1.3.0-0ubuntu2
- 1.4.2-0ubuntu1
- 1.4.2-0ubuntu2
- 1.4.2-0ubuntu3
- 1.4.2-0ubuntu3.1
- 1.4.2-0ubuntu3.3
- 1.4.2-0ubuntu3.4
- 1.4.2-0ubuntu3.4+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg6b Ubuntu:Pro:16.04:LTS
- Versions
- 1:6b2-2
- 1:6b2-2ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg9 Ubuntu:Pro:16.04:LTS
- Versions
- 1:9a-2ubuntu1
- 1:9b-1
- 1:9b-1ubuntu1
- 1:9b-1ubuntu1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg-turbo Ubuntu:18.04:LTS
- Versions
- 1.5.2-0ubuntu5
- 1.5.2-0ubuntu5.18.04.1
- 1.5.2-0ubuntu5.18.04.3
- 1.5.2-0ubuntu5.18.04.4
- 1.5.2-0ubuntu5.18.04.6
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg6b Ubuntu:18.04:LTS
- Versions
- 1:6b2-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg9 Ubuntu:18.04:LTS
- Versions
- 1:9b-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg-turbo Ubuntu:20.04:LTS
- Versions
- 2.0.3-0ubuntu1
- 2.0.3-0ubuntu1.20.04.1
- 2.0.3-0ubuntu1.20.04.3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg6b Ubuntu:20.04:LTS
- Versions
- 1:6b2-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg9 Ubuntu:20.04:LTS
- Versions
- 1:9c-2
- 1:9d-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg-turbo Ubuntu:22.04:LTS
- Versions
- 2.0.6-0ubuntu2
- 2.0.6-0ubuntu3
- 2.1.1-0ubuntu1
- 2.1.2-0ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg6b Ubuntu:22.04:LTS
- Versions
- 1:6b2-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg9 Ubuntu:22.04:LTS
- Versions
- 1:9d-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg-turbo Ubuntu:24.04:LTS
- Versions
- 2.1.5-2ubuntu1
- 2.1.5-2ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg6b Ubuntu:24.04:LTS
- Versions
- 1:6b2-3.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg9 Ubuntu:24.04:LTS
- Versions
- 1:9e-1
- 1:9e-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg-turbo Ubuntu:26.10
- Versions
- 2.1.5-4ubuntu4
- 1:3.1.3-4ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg6b Ubuntu:26.10
- Versions
- 1:6b2-4build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg9 Ubuntu:26.10
- Versions
- 1:9f-2build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg-turbo Ubuntu:26.04:LTS
- Versions
- 2.1.5-4ubuntu2
- 2.1.5-4ubuntu3
- 2.1.5-4ubuntu4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg6b Ubuntu:26.04:LTS
- Versions
- 1:6b2-4
- 1:6b2-4build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libjpeg9 Ubuntu:26.04:LTS
- Versions
- 1:9f-2
- 1:9f-2build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published