Mozjpeg (Mozilla) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 34 known versions, newest CVE from 2020-06-03. Vendor: Mozilla.

CVEs of Mozjpeg

• CVE-2020-13790 - CVSS 8.1 (high), 2020-06-03: libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.
• CVE-2018-14498 - CVSS 6.5 (medium), 2019-03-07: get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read…