CVE-2018-13030

An issue was discovered in jpeg-compressor 0.1. The build_huffman function in stb_image.c allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact.

Score

CVSS 3.0 7.8 High

Status

Modified - cve@mitre.org

Published

2018-06-30

Last modified

2024-09-17

Weaknesses

CWE-787

Affected products

• Jpeg Compressor (Jpeg-compressor Project)

References

• https://github.com/fouzhe/security/tree/master/jpeg-compressor
• https://github.com/kornelski/jpeg-compressor/issues/12