facebook/fresco

The vulnerability of the libjpeg-turbo

Open

#2,433 opened on Nov 12, 2019

View on GitHubContributor guide
 (3 comments) (0 reactions) (0 assignees)Java (3,750 forks)batch import
buggood first issuehelp wanted

Repository metrics

Stars
 (17,072 stars)
PR merge metrics
 (No merged PRs in 30d)

Description

Description

There is a vulnerability for libjpeg-turbo，Does this vulnerability exist in fresco, the libjpeg-turbo is used by fresco.

See details from https://nvd.nist.gov/vuln/detail/CVE-2018-14498

Reproduction

Solution

Additional Information

Contributor guide

Research direction
Investigate whether Fresco uses the vulnerable version of libjpeg turbo and determine if any remediation is needed.
Tech stack
java
Domain
mobilesecurity
Issue type
Bug
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
2
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
JavaGit
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
70