CVE-2020-35538

CVE-2020-35538

Vendor N/A

Product libjpeg-turbo

Weakness CWE-476

Published August 31, 2022

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.

Key dates

02Disclosure timeline

August 31, 2022 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-35538 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/476.html

Related vulnerabilities

04Related CVE

CVE-2025-32909 Libsoup: null pointer dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c CVE-2022-43972 Null pointer dereference in Linksys WRT54GL CVE-2024-47613 GHSL-2024-118: GStreamer has a null pointer dereference in gst_gdk_pixbuf_dec_flush CVE-2026-23952 ImageMagick has a NULL pointer dereference in MSL parser via <comment> tag before image load CVE-2025-31176 Gnuplot: gnuplot segmentation fault on plot3d_points