The issue is related to the `jpeg mem available()` function in `jmemnobs.c` in `djpeg`, which does not honor the `max memory to use` setting, possibly causing excessive memory consumption. This could allow a remote attacker to disclose protected information or cause a denial of service.