В , a library for encoding and decoding JPEG images, vulnerability (), leading to an integer overflow and subsequent corruption of the heap contents when processing JPEG files in a certain way. Potentially, the vulnerability does not exclude the possibility of creating an exploit to organize code execution on the system (the attack requires processing a very large image with a resolution of 26755 x 26755).
Problem without unnecessary publicity , but apparently eliminated and additional attack vectors remain. In distributions the problem remains uncorrected (, , , , ).
Source: opennet.ru
