Cupoch Out-of-Bounds Write Vulnerability in libjpeg-turbo Module

An out-of-bounds write vulnerability has been identified in the Cupoch library, specifically within the libjpeg-turbo module. This issue arises in the 'decomp()' function of the 'tjbench.C' file, where the vulnerability allows for memory corruption by writing data outside the allocated buffer boundaries. Such an out-of-bounds write can potentially be exploited to overwrite memory, leading to undefined behavior or arbitrary code execution.

Impact

Exploitation of this vulnerability causes a signed integer overflow, resulting in a segmentation fault. This occurs when the 'decomp()' function attempts to decompress images containing more than approximately 715 million pixels.

Remediation

Users can apply the security patch merged into the main branch of the Cupoch repository. This patch addresses the vulnerability by incorporating the same fix that was applied to the original libjpeg-turbo repository.