CVE-2021-39514

6.5 MEDIUM

An issue was discovered in libjpeg through 2020021

Published: 2021-09-20 · Last updated: 2026-06-17

Severity and scoring

CVSS: 6.5 MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE: CWE-697

Affected products

Vendor	Product
jpeg	libjpeg

Description

An issue was discovered in libjpeg through 2020021. An uncaught floating point exception in the function ACLosslessScan::ParseMCU() located in aclosslessscan.cpp. It allows an attacker to cause Denial of Service.

Source: NVD

References

[NVD]https://nvd.nist.gov/vuln/detail/CVE-2021-39514
[Exploit reference]https://github.com/thorfdbg/libjpeg/issues/36
[Exploit reference]https://github.com/thorfdbg/libjpeg/issues/36

Related CVEs

Same vendor

CVE-2021-39520 — An issue was discovered in libjpeg through 2020021 (6.5 MEDIUM)
CVE-2021-39519 — An issue was discovered in libjpeg through 2020021 (6.5 MEDIUM)
CVE-2021-39518 — An issue was discovered in libjpeg through 2020021 (6.5 MEDIUM)
CVE-2021-39517 — An issue was discovered in libjpeg through 2020021 (6.5 MEDIUM)
CVE-2021-39516 — An issue was discovered in libjpeg through 2020021 (6.5 MEDIUM)

Same CWE

CVE-2026-44249 — Netty is a network application framework for development of protocol servers and clients (8.1 HIGH)
CVE-2026-45569 — Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers (8.1 HIGH)
CVE-2026-45567 — Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers (8.3 HIGH)
CVE-2026-47202 — Kavita is a cross platform reading server
CVE-2026-9369 — A security flaw has been discovered in NousResearch hermes-agent 2026.4.23 (5.3 MEDIUM)