CVE-2020-35538

Опубликовано: 31 авг. 2022

Источник: debian

EPSS Низкий

Описание

A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.

Пакет	Статус	Версия исправления	Релиз	Тип
libjpeg-turbo	fixed	1:2.0.6-1		package
libjpeg-turbo	no-dsa		buster	package

https://github.com/libjpeg-turbo/libjpeg-turbo/commit/9120a247436e84c0b4eea828cb11e8f665fcde30 (2.0.6)
https://github.com/libjpeg-turbo/libjpeg-turbo/issues/441

EPSS

Процентиль: 19%

0.00269

Низкий

CVE-2020-35538

CVSS3: 5.5

ubuntu

почти 4 года назад

A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.

CVE-2020-35538

CVSS3: 5.5

redhat

около 6 лет назад

A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.

CVE-2020-35538

CVSS3: 5.5

nvd

почти 4 года назад

A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.

CVE-2020-35538

CVSS3: 5.5

msrc

почти 4 года назад

Описание отсутствует

SUSE-SU-2022:3523-1

suse-cvrf

почти 4 года назад

Security update for libjpeg-turbo

EPSS

Процентиль: 19%

0.00269

Низкий