CVE-2023-37837: Jpeg Libjpeg

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

libjpeg commit db33a6e was discovered to contain a heap buffer overflow via LineBitmapRequester::EncodeRegion at linebitmaprequester.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.

Affected products

• Jpeg Libjpeg: before 1.66 (fixed in 1.66)

Published 2023-07-13. Last modified 2026-06-17.