CVE-2012-2806

8.8 highEPSS 4.8%

Heap-based buffer overflow in the get_sos function in jdmarker.c in libjpeg-turbo 1.2.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large component count in the header of a JPEG image.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 4.8% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2012-08-13
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

d.r.commander:libjpeg-turbo

References

http://libjpeg-turbo.svn.sourceforge.net/viewvc/libjpeg-turbo?view=revision&revision=830
http://osvdb.org/84040
http://secunia.com/advisories/49883
http://secunia.com/advisories/50753
http://security.gentoo.org/glsa/glsa-201209-13.xml

Check your stack JSON