CVE-2018-13037: Jpeg-Compressor Project Jpeg Compressor

High severity, CVSS 7.8. EPSS: 1.6% chance of exploitation in the next 30 days.

An issue was discovered in jpeg-compressor 0.1. The bmp_load function in stb_image.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact.

Affected products

• Jpeg-Compressor Project Jpeg Compressor: version 0.1 only

Published 2018-07-01. Last modified 2026-06-17.