CVE-2017-15232: Libjpeg-Turbo

Medium severity, CVSS 6.5. EPSS: 2.4% chance of exploitation in the next 30 days.

libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file.

Affected products

• Libjpeg-Turbo Libjpeg-Turbo: version 1.5.2 only

Published 2017-10-11. Last modified 2026-06-17.