CVEs-PoC/2020/CVE-2020-17541.md

CVE-2020-17541

Description

Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A remote attacker can send a malformed jpeg file to the service and cause arbitrary code execution or denial of service of the target service.

POC

Reference

• https://github.com/libjpeg-turbo/libjpeg-turbo/issues/392

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/Live-Hack-CVE/CVE-2020-17541