CVE-2017-15232

Name of the Vulnerable Software and Affected Versions: libjpeg-turbo version 1.5.2

Description: The issue is related to a NULL Pointer Dereference in the jdpostct.c and jquant1.c components of the libjpeg-turbo library. This can be triggered by a crafted JPEG file, potentially allowing a remote attacker to cause a denial of service.

Recommendations: For libjpeg-turbo version 1.5.2, consider avoiding the use of the jdpostct.c and jquant1.c components until a patch is available. As a temporary workaround, restrict the processing of specially crafted JPEG files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.