libjpeg-turbo 3.1.4

{
  "id": "bc853d0527b53e5bfb0bb3a9235f1e0e60dc85103f691ed150852be59cdad803",
  "url": "https://github.com/libjpeg-turbo/libjpeg-turbo/releases/tag/3.1.4",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "libjpeg-turbo 3.1.4",
    "summary": "libjpeg-turbo 3.1.4 fixes multiple issues, including a potential buffer overrun in the TurboJPEG 2.x compatibility wrapper and a division-by-zero error in jpegtran. It also hardens APIs against malformed or invalid inputs.",
    "evidence": "Fixed an issue in the TurboJPEG 2.x compatibility wrapper whereby, if a calling program attempted to decompress a lossless JPEG image using tjDecompress2() with decompression scaling, the decompressed image was unexpectedly unscaled. This could have led to a buffer overrun",
    "products": [
      {
        "name": {
          "value": "libjpeg-turbo",
          "evidence": "Release notes from libjpeg-turbo"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.1.4",
            "evidence": "3.1.4"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "github-libjpeg-turbo-libjpeg-turbo",
  "document_id": 21637,
  "published_at": "2026-06-30T19:33:10+00:00"
}