Mozilla: >> Mozjpeg >> 4.0.0 Security Vulnerabilities
libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.
CVSS Score
8.1
EPSS Score
0.005
Published
2020-06-03