CVE-2012-2806

Heap-based buffer overflow in the get_sos function in jdmarker.c in libjpeg-turbo 1.2.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large component count in the header of a JPEG image.

• CWE-787
• CWE-787

• http://libjpeg-turbo.svn.sourceforge.net/viewvc/libjpeg-turbo?view=revision&revision=830Product
• http://osvdb.org/84040Broken Link
• http://secunia.com/advisories/49883Not Applicable
• http://secunia.com/advisories/50753Not Applicable
• http://security.gentoo.org/glsa/glsa-201209-13.xmlThird Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2012:121Not Applicable
• http://www.openwall.com/lists/oss-security/2012/07/17/3Mailing List
• http://www.securityfocus.com/bid/54480Third Party Advisory, VDB Entry
• https://bugzilla.mozilla.org/show_bug.cgi?id=759802Issue Tracking
• https://bugzilla.redhat.com/show_bug.cgi?id=826849Issue Tracking
• https://exchange.xforce.ibmcloud.com/vulnerabilities/76952VDB Entry
• http://libjpeg-turbo.svn.sourceforge.net/viewvc/libjpeg-turbo?view=revision&revision=830Product
• http://osvdb.org/84040Broken Link
• http://secunia.com/advisories/49883Not Applicable
• http://secunia.com/advisories/50753Not Applicable
• http://security.gentoo.org/glsa/glsa-201209-13.xmlThird Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2012:121Not Applicable
• http://www.openwall.com/lists/oss-security/2012/07/17/3Mailing List
• http://www.securityfocus.com/bid/54480Third Party Advisory, VDB Entry
• https://bugzilla.mozilla.org/show_bug.cgi?id=759802Issue Tracking
• https://bugzilla.redhat.com/show_bug.cgi?id=826849Issue Tracking
• https://exchange.xforce.ibmcloud.com/vulnerabilities/76952VDB Entry

Published

Aug 13, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-2800Unspecified vulnerability in the ff_ivi_process_empty_tile f…
• CVE-2012-2801Unspecified vulnerability in libavcodec/avs.c in FFmpeg befo…
• CVE-2012-2802Unspecified vulnerability in the ac3_decode_frame function i…
• CVE-2012-2803Double free vulnerability in the mpeg_decode_frame function …
• CVE-2012-2804Unspecified vulnerability in libavcodec/indeo3.c in FFmpeg b…
• CVE-2012-2805Unspecified vulnerability in FFMPEG 0.10 allows remote attac…
• CVE-2012-2807Multiple integer overflows in libxml2, as used in Google Chr…
• CVE-2012-2808The PRNG implementation in the DNS resolver in Bionic in And…
• CVE-2012-2812The exif_entry_get_value function in exif-entry.c in the EXI…
• CVE-2012-2813The exif_convert_utf16_to_utf8 function in exif-entry.c in t…
• CVE-2012-2814Buffer overflow in the exif_entry_format_value function in e…
• CVE-2012-2815Google Chrome before 20.0.1132.43 allows remote attackers to…