CVE-2017-15232

libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file.

Date published : 2017-10-10

https://github.com/libjpeg-turbo/libjpeg-turbo/pull/182

https://github.com/mozilla/mozjpeg/issues/268