Security vulnerability affects the libjpeg-turbo package. A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2 merged upsample internal() function of jdmrgext.