CVE-2012-2845
EPSS 0.62%Published: 7/13/2012Modified: 4/28/2026
Description
Integer overflow in the jpeg_data_load_data function in jpeg-data.c in libjpeg in exif 0.6.20 allows remote attackers to cause a denial of service (buffer over-read and application crash) or obtain potentially sensitive information via a crafted JPEG file.
Affected packages (2)
- Alpine/libexiffrom 0, < 0.6.21-r0
- Debian/exiffrom 0, < 0.6.20-2