CVE-2014-9092

libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service (crash) via a crafted JPEG file, related to the Exif marker.

• CWE-119

• http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147315.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147336.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150957.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150967.htmlThird Party Advisory
• http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26482&sid=81658bc2f51a8d9893279cd01e83783fThird Party Advisory
• http://www.openwall.com/lists/oss-security/2014/11/26/8Mailing List
• http://www.securityfocus.com/bid/71326Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1169845Issue Tracking, Patch, Third Party Advisory, VDB Entry
• https://tapani.tarvainen.info/linux/convertbug/Third Party Advisory
• https://usn.ubuntu.com/3706-1/
• https://usn.ubuntu.com/3706-2/
• http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147315.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147336.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150957.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150967.htmlThird Party Advisory
• http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26482&sid=81658bc2f51a8d9893279cd01e83783fThird Party Advisory
• http://www.openwall.com/lists/oss-security/2014/11/26/8Mailing List
• http://www.securityfocus.com/bid/71326Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1169845Issue Tracking, Patch, Third Party Advisory, VDB Entry
• https://tapani.tarvainen.info/linux/convertbug/Third Party Advisory
• https://usn.ubuntu.com/3706-1/
• https://usn.ubuntu.com/3706-2/

Published

Oct 10, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-9065common/spinlock.c in Xen 4.4.x and earlier does not properly…
• CVE-2014-9066Xen 4.4.x and earlier, when using a large number of VCPUs, d…
• CVE-2014-9087Integer underflow in the ksba_oid_to_str function in Libksba…
• CVE-2014-9089Multiple SQL injection vulnerabilities in view_all_bug_page.…
• CVE-2014-9090The do_double_fault function in arch/x86/kernel/traps.c in t…
• CVE-2014-9091Icecast before 2.4.0 does not change the supplementary group…
• CVE-2014-9093LibreOffice before 4.3.5 allows remote attackers to cause a …
• CVE-2014-9094Multiple cross-site scripting (XSS) vulnerabilities in deplo…
• CVE-2014-9095Multiple SQL injection vulnerabilities in Raritan Power IQ 4…
• CVE-2014-9096Multiple SQL injection vulnerabilities in recover.php in Pli…
• CVE-2014-9097Multiple SQL injection vulnerabilities in the Apptha WordPre…
• CVE-2014-9098Multiple cross-site scripting (XSS) vulnerabilities in the A…