Skip to content
Heist/ feed
Back to feed
UnratedFix available

libjpeg-turbo 3.2.0

Type: patchSources: libjpeg-turbo

libjpeg-turbo 3.2.0 hardens the PNG writer and libjpeg API against misuse that could cause memory errors. The release notes state that the described issues did not likely pose a security risk or did not pose one.

Products
libjpeg-turbo
Affected versions
Not specified
Fixed versions
3.2.0
CVEs
Not specified
Confirmed fixed CVEs
Not specified
Updated in this feed
29 Oct 2026, 01:39 UTC · Revision 1

Source evidence

libjpeg-turbo 3.2.0

github-libjpeg-turbo-libjpeg-turbo · Original source

Published 30 Jun 2026, 19:25 UTC

libjpeg-turbo 3.2.0 hardens the PNG writer and libjpeg API against misuse that could cause memory errors. The release notes state that the described issues did not likely pose a security risk or did not pose one.

Hardened the PNG writer (which is used by djpeg and tj3SaveImage*()) against applications that may erroneously attempt to write sample values that are out of range for the specified output data precision.

libjpeg-turbo

Fixed versions: 3.2.0

Complete source record
{
  "id": "9afadae17c2cf91683f7c22460f23727ddf3636f4e741177f65a1d6c353c9c7e",
  "url": "https://github.com/libjpeg-turbo/libjpeg-turbo/releases/tag/3.2.0",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "libjpeg-turbo 3.2.0",
    "summary": "libjpeg-turbo 3.2.0 hardens the PNG writer and libjpeg API against misuse that could cause memory errors. The release notes state that the described issues did not likely pose a security risk or did not pose one.",
    "evidence": "Hardened the PNG writer (which is used by djpeg and tj3SaveImage*()) against applications that may erroneously attempt to write sample values that are out of range for the specified output data precision.",
    "products": [
      {
        "name": {
          "value": "libjpeg-turbo",
          "evidence": "Release notes from libjpeg-turbo"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.2.0",
            "evidence": "Release notes from libjpeg-turbo\n3.2.0"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "github-libjpeg-turbo-libjpeg-turbo",
  "document_id": 21634,
  "published_at": "2026-06-30T19:25:14+00:00"
}