ZeroDay Findings
Sign inSign up

Findings

CVE-2018-11212

An issue was discovered in libjpeg 9a and 9d.

Published May 16, 2018 · updated Oct 15, 2026 · ijg libjpeg

An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. May 16, 2018 · NIST NVD

    Detected

    An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.

  2. Oct 15, 2026 · NIST NVD

    Updated

    An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.

Affected

  • cpe canonical/ubuntu linux12.04
  • cpe canonical/ubuntu linux14.04
  • cpe canonical/ubuntu linux16.04
  • cpe canonical/ubuntu linux18.04
  • cpe debian/debian linux8.0
  • cpe ijg/libjpeg9a
  • cpe netapp/oncommand unified managerversion unspecified
  • cpe opensuse/leap15.0
  • cpe oracle/jdk1.7.0
  • cpe redhat/satellite5.8

Sources

  • CVE.orgVulnerability recordCVE-2018-11212

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2018-11212

    An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.

    nvd.nist.gov

References