CVE-2018-11416: Jpegoptim Project Jpegoptim

High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days.

jpegoptim.c in jpegoptim 1.4.5 (fixed in 1.4.6) has an invalid use of realloc() and free(), which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

Affected products

Published 2018-05-24. Last modified 2026-06-17.