CVE-2018-11212

An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.

CVSS 3.0

6.5CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

4.6% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-25)

CWE

CWE-369

Published

2018-05-16

Modified

2026-10-15

Record from

the NVD, synced 2026-10-19

Affected

• canonical:ubuntu_linux
• debian:debian_linux
• ijg:libjpeg
• netapp:oncommand_unified_manager
• netapp:oncommand_workflow_automation
• netapp:snapmanager
• opensuse:leap
• oracle:jdk
• oracle:jre
• redhat:enterprise_linux_desktop
• redhat:enterprise_linux_server
• redhat:enterprise_linux_workstation
• redhat:satellite

References

• http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00028.html
• http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html
• http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00013.html
• http://www.ijg.org/
• http://www.securityfocus.com/bid/106583

Check your stackJSON