Launchpad.net

CVE 2017-15232

libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file.

See the CVE page on Mitre.org for more details.