https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:06:24.852028+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2019:3705 ALSA-2019:3705 — Moderate: libjpeg-turbo security update 2026-10-02T19:06:25.072168+00:00

Affected: AlmaLinux:8: turbojpeg-devel

The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.

Security Fix(es):

* libjpeg-turbo: heap-based buffer over-read via crafted 8-bit BMP in get_8bit_row in rdbmp.c leads to denial of service (CVE-2018-14498)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2021-01309 bdu:2021-01309 2026-10-02T19:06:25.072235+00:00 bdu:2021-01309 https://cve.radiocsirt.org/vuln/bell-cve-2018-14498 Withdrawn: BELL-CVE-2018-14498 — CVE-2018-14498 does not affect BellSoft software 2026-10-02T19:06:25.072253+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2022-avi-267 certfr-2022-avi-267 — De multiples vulnérabilités ont été découvertes dans Juniper Networks Junos Space. Elles permettent à un attaquant de p… 2026-10-02T19:06:25.072269+00:00 certfr-2022-avi-267 https://cve.radiocsirt.org/vuln/euvd-2026-67079 EUVD-2026-67079 2026-10-02T19:06:25.072283+00:00 EUVD-2026-67079 https://cve.radiocsirt.org/vuln/fkie_cve-2018-14498 fkie_cve-2018-14498 2026-10-02T19:06:25.072294+00:00

get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries.

 https://cve.radiocsirt.org/vuln/ghsa-jg8v-w7gx-4g68 GHSA-jg8v-w7gx-4g68 2026-10-02T19:06:25.072316+00:00

get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries.

 https://cve.radiocsirt.org/vuln/gsd-2018-14498 gsd-2018-14498 2026-10-02T19:06:25.072330+00:00 gsd-2018-14498 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1118-1 openSUSE-SU-2019:1118-1 — Security update for libjpeg-turbo 2026-10-02T19:06:25.072341+00:00

Security update for libjpeg-turbo

 https://cve.radiocsirt.org/vuln/suse-su-2019:0711-1 SUSE-SU-2019:0711-1 — Security update for libjpeg-turbo 2026-10-02T19:06:25.072358+00:00

Security update for libjpeg-turbo

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-14498 UBUNTU-CVE-2018-14498 2026-10-02T19:06:25.072375+00:00

Affected: Ubuntu:Pro:14.04:LTS: libjpeg-turbo, Ubuntu:16.04:LTS: libjpeg-turbo, Ubuntu:18.04:LTS: libjpeg-turbo

get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0517 WID-SEC-W-2022-0517 — Red Hat Enterprise Linux: Mehrere Schwachstellen 2026-10-02T19:06:25.072397+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.