CVE-2018-10126

ijg-libjpeg before 9d, as used in tiff2pdf (from LibTIFF) and other products, does not check for a NULL pointer at a certain place in jpeg_fdct_16x16 in jfdctint.c.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2018-04-21

Last modified

2024-08-20

Weaknesses

CWE-476

Affected products

• Libtiff (Libtiff)

References

• http://bugzilla.maptools.org/show_bug.cgi?id=2786
• https://gitlab.com/libtiff/libtiff/-/issues/128
• https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org…