Peng Li

**Name of the Vulnerable Software and Affected Versions** IJG JPEG (aka libjpeg) versions 8 through 9c **Description** The issue is related to an out-of-bounds array read in the jdhuff.c component of the libjpeg library, which can lead to the disclosure of protected information or cause a denial of service. This can be exploited by a remote attacker. **Recommendations** For IJG JPEG (aka libjpeg) versions 8 through 9c, consider updating to a version that fixes the out-of-bounds array read issue in the jdhuff.c component to prevent potential information disclosure or denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** wolfSSL versions prior to 3.10.2 **Description** The issue is related to an out-of-bounds memory access that occurs when loading crafted DH parameters. This can lead to a buffer overflow, which is triggered by a malformed temporary DH file. **Recommendations** For versions prior to 3.10.2, update to version 3.10.2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** wolfSSL versions prior to 3.10.2 **Description** The issue makes it easier for a malicious user with access to view cache on a machine to extract RSA key information due to the function fp mul comba. **Recommendations** For versions prior to 3.10.2, update to version 3.10.2 or later to resolve the issue.