Passing a specially crafted jpeg file to libjpeg-turbo could lead to stack smashing (CVE-2014-9092).
{ "section": "core" }
"https://advisories.mageia.org/MGASA-2014-0544.json"