CVE-2020-35538

Опубликовано: 31 авг. 2022

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.

Ссылки

https://github.com/libjpeg-turbo/libjpeg-turbo/commit/9120a247436e84c0b4eea828cb11e8f665fcde30
Patch
Third Party Advisory
https://github.com/libjpeg-turbo/libjpeg-turbo/issues/441
Issue Tracking
Third Party Advisory
https://github.com/libjpeg-turbo/libjpeg-turbo/commit/9120a247436e84c0b4eea828cb11e8f665fcde30
Patch
Third Party Advisory
https://github.com/libjpeg-turbo/libjpeg-turbo/issues/441
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:libjpeg-turbo:libjpeg-turbo:2.0.5:*:*:*:*:*:*:*

EPSS

Процентиль: 5%

0.00022

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVE-2020-35538

CVSS3: 5.5

ubuntu

больше 3 лет назад

A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.

CVE-2020-35538

CVSS3: 5.5

redhat

больше 5 лет назад

A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.

CVE-2020-35538

CVSS3: 5.5

msrc

больше 3 лет назад

Описание отсутствует

CVE-2020-35538

CVSS3: 5.5

debian

больше 3 лет назад

A crafted input file could cause a null pointer dereference in jcopy_s ...

SUSE-SU-2022:3523-1

suse-cvrf

больше 3 лет назад

Security update for libjpeg-turbo

EPSS

Процентиль: 5%

0.00022

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-476