libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palette through tj3LoadImage12() or tj3LoadImage16() using the default pixel format, the application may trigger a division-by-zero in alloc_sarray(), causing a SIGFPE and denial of service.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://github.com/libjpeg-turbo/libjpeg-turbo/issues/911 |
|
History
Wed, 26 Aug 2026 20:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Division‑by‑Zero in libjpeg‑turbo PNG Decoder Causing Application Crash | |
| Weaknesses | CWE-369 |
Wed, 26 Aug 2026 20:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Libjpeg-turbo
Libjpeg-turbo libjpeg-turbo |
|
| Vendors & Products |
Libjpeg-turbo
Libjpeg-turbo libjpeg-turbo |
Wed, 26 Aug 2026 18:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palette through tj3LoadImage12() or tj3LoadImage16() using the default pixel format, the application may trigger a division-by-zero in alloc_sarray(), causing a SIGFPE and denial of service. | |
| References |
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-08-26T18:03:21.285Z
Reserved: 2026-08-17T00:00:00.000Z
Link: CVE-2026-75466
No data.
Status : Received
Published: 2026-08-26T19:17:03.787
Modified: 2026-08-26T19:17:03.787
Link: CVE-2026-75466
No data.
OpenCVE Enrichment
Updated: 2026-08-26T20:30:11Z
Weaknesses