CVE-2023-37836

MediumCVSS 6.5

Published: 13/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.51%

39th percentile - higher than 39% of all known CVEs

Summary

A vulnerability in the libjpeg library was discovered that allows for a reachable assertion in the BitMapHook::BitMapHook method in bitmaphook.cpp. This vulnerability can be exploited by attackers to cause a Denial of Service (DoS) via a crafted file.

Risk Assessment

This vulnerability may lead to service unavailability, impacting the organization's operational continuity and user trust.

Recommendation

It is recommended to update the libjpeg library to the latest version to mitigate this vulnerability and to monitor systems for potential attack attempts.

Original NVD description (English source)

libjpeg commit db33a6e was discovered to contain a reachable assertion via BitMapHook::BitMapHook at bitmaphook.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.