DEBIAN-CVE-2026-75466

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/CVE-2026-75466
Import Source
https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-75466.json
JSON Data
https://api.osv.dev/v1/vulns/DEBIAN-CVE-2026-75466
Upstream
  • CVE-2026-75466
Withdrawn
2026-08-27T08:00:15Z
Published
2026-08-26T19:17:03Z
Modified
2026-08-27T08:00:15Z
Summary
[none]
Details

libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palette through tj3LoadImage12() or tj3LoadImage16() using the default pixel format, the application may trigger a division-by-zero in alloc_sarray(), causing a SIGFPE and denial of service.

References

Affected packages

Debian:11 / libjpeg-turbo

Package

Name
libjpeg-turbo
Purl
pkg:deb/debian/libjpeg-turbo?arch=source&distro=bullseye

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1:2.*
1:2.0.6-4
1:2.1.1-1
1:2.1.1-2
1:2.1.2-1
1:2.1.5-1
1:2.1.5-2
1:2.1.5-3
1:2.1.5-3.1
1:2.1.5-4
1:3.*
1:3.1.3-1
1:3.1.3-2
1:3.1.3-3
1:3.1.3-4

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-75466.json"

Debian:12 / libjpeg-turbo

Package

Name
libjpeg-turbo
Purl
pkg:deb/debian/libjpeg-turbo?arch=source&distro=bookworm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1:2.*
1:2.1.5-2
1:2.1.5-3
1:2.1.5-3.1
1:2.1.5-4
1:3.*
1:3.1.3-1
1:3.1.3-2
1:3.1.3-3
1:3.1.3-4

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-75466.json"

Debian:13 / libjpeg-turbo

Package

Name
libjpeg-turbo
Purl
pkg:deb/debian/libjpeg-turbo?arch=source&distro=trixie

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1:2.*
1:2.1.5-4
1:3.*
1:3.1.3-1
1:3.1.3-2
1:3.1.3-3
1:3.1.3-4

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-75466.json"

Debian:14 / libjpeg-turbo

Package

Name
libjpeg-turbo
Purl
pkg:deb/debian/libjpeg-turbo?arch=source&distro=forky

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1:2.*
1:2.1.5-4
1:3.*
1:3.1.3-1
1:3.1.3-2
1:3.1.3-3
1:3.1.3-4

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-75466.json"