Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2022-32202: Fixed a NULL-pointer access in the line-based reconstruction process · thorfdbg/libjpeg@51c3241

In libjpeg 1.63, there is a NULL pointer dereference in LineBuffer::FetchRegion in linebuffer.cpp.

CVE
#ibm

@@ -43,7 +43,7 @@

** This class pulls blocks from the frame and reconstructs from those

** quantized block lines or encodes from them.

**

** $Id: linebitmaprequester.cpp,v 1.36 2021/07/22 13:18:36 thor Exp $

** $Id: linebitmaprequester.cpp,v 1.37 2022/05/31 10:16:52 thor Exp $

**

*/

@@ -562,7 +562,11 @@ void LineBitmapRequester::ReconstructRegion(const RectAngle<LONG> &orgregion,con

LONG *dst = m_ppCTemp[i];

if (i >= rr->rr_usFirstComponent && i <= rr->rr_usLastComponent) {

ExtractBitmap(m_ppTempIBM[i],r,i);

FetchRegion(x,*m_pppImage[i],dst);

if (*m_pppImage[i]) {

FetchRegion(x,*m_pppImage[i],dst);

} else {

memset(dst,0,sizeof(LONG) * 64);

}

} else {

memset(dst,0,sizeof(LONG) * 64);

}

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907