CVE-2023-37837

MediumCVSS 6.5

Published: 13/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.51%

40th percentile - higher than 40% of all known CVEs

Summary

A heap buffer overflow was discovered in the libjpeg library in the LineBitmapRequester::EncodeRegion function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.

Risk Assessment

Organizations may be exposed to attacks that lead to service unavailability related to image processing. This can impact the continuity and availability of applications.

Recommendation

It is recommended to update the libjpeg library to the latest version to mitigate this vulnerability. Additionally, monitor systems for unusual activities related to image file processing.

Original NVD description (English source)

libjpeg commit db33a6e was discovered to contain a heap buffer overflow via LineBitmapRequester::EncodeRegion at linebitmaprequester.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.