CVE-2019-2201

A vulnerability was found in libjpeg-turbo that could allow a remote attacker to execute arbitrary code on the system, which is caused by an integer overflow, which leads to subsequent heap corruption.

This vulnerability is rated as a moderate, due to a missing bounds check  in generate_jsimd_ycc_rgb_convert_neon within jsimd_arm64_neon.S, which could cause an out-of-bounds write, this could result in remote code execution, it requires user interaction (such as opening a crafted file) for exploitation, achieving successful exploitation is difficult and depends on specific conditions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.