« List of all CVEs

CVE-2020-35538

Published: 8/31/2022 Last updated: 8/4/2024 Reserved: 12/17/2020

A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.

CNA assigner: redhat (53f830b8-0a3f-465b-8143-3b8a9948e749) Requested by: n/a

Opam packages affected (3)

conf-gd conf-libjpeg grib

Products affected (1)

Product Vendor Version
libjpeg-turbo n/a All versions prior to and including 15.1, 13.6, 11.11, and all versions prior to and including February 2023 release

References (4)