Medium severity5.5NVD Advisory· Published Aug 31, 2022· Updated Jun 17, 2026
CVE-2020-35538
CVE-2020-35538
Description
A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
19cpe:2.3:a:libjpeg-turbo:libjpeg-turbo:2.0.5:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:libjpeg-turbo:libjpeg-turbo:2.0.5:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)
- osv-coords16 versionspkg:rpm/opensuse/libjpeg-turbo&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/libjpeg-turbo&distro=openSUSE%20Leap%20Micro%205.2pkg:rpm/opensuse/libjpeg62-turbo&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/libjpeg62-turbo&distro=openSUSE%20Leap%2015.4pkg:rpm/suse/libjpeg-turbo&distro=SUSE%20Linux%20Enterprise%20Micro%205.1pkg:rpm/suse/libjpeg-turbo&distro=SUSE%20Linux%20Enterprise%20Micro%205.2pkg:rpm/suse/libjpeg-turbo&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3pkg:rpm/suse/libjpeg-turbo&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP3pkg:rpm/suse/libjpeg-turbo&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP3pkg:rpm/suse/libjpeg-turbo&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/libjpeg-turbo&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/libjpeg-turbo&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5pkg:rpm/suse/libjpeg62-turbo&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3pkg:rpm/suse/libjpeg62-turbo&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/libjpeg62-turbo&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/libjpeg62-turbo&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5
< 1.5.3-150000.32.5.1+ 15 more
- (no CPE)range: < 1.5.3-150000.32.5.1
- (no CPE)range: < 1.5.3-150000.32.5.1
- (no CPE)range: < 1.5.3-150000.32.5.1
- (no CPE)range: < 1.5.3-150000.32.5.1
- (no CPE)range: < 1.5.3-150000.32.5.1
- (no CPE)range: < 1.5.3-150000.32.5.1
- (no CPE)range: < 1.5.3-150000.32.5.1
- (no CPE)range: < 1.5.3-150000.32.5.1
- (no CPE)range: < 1.5.3-150000.32.5.1
- (no CPE)range: < 1.5.3-31.28.1
- (no CPE)range: < 1.5.3-31.28.1
- (no CPE)range: < 1.5.3-31.28.1
- (no CPE)range: < 1.5.3-150000.32.5.1
- (no CPE)range: < 1.5.3-31.28.1
- (no CPE)range: < 1.5.3-31.28.1
- (no CPE)range: < 1.5.3-31.28.1
Patches
Vulnerability mechanics
References
2- github.com/libjpeg-turbo/libjpeg-turbo/commit/9120a247436e84c0b4eea828cb11e8f665fcde30nvdPatchThird Party Advisory
- github.com/libjpeg-turbo/libjpeg-turbo/issues/441nvdIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.