Patchwire CVEs, their patch status, and feeds to follow them

CVE-2020-35538

Fixed in a distro release EPSS <1%

A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.

Published 2022-08-31 · CVE record · OSV

Products: libjpeg-turbo

Distro releases

ReleasePackageFixed in
Alpine 3.17libjpeg-turbo2.0.6-r0
Alpine 3.18libjpeg-turbo2.0.6-r0
Alpine 3.19libjpeg-turbo2.0.6-r0
Alpine 3.20libjpeg-turbo2.0.6-r0
Alpine 3.21libjpeg-turbo2.0.6-r0
Alpine 3.22libjpeg-turbo2.0.6-r0
Alpine 3.23libjpeg-turbo2.0.6-r0
Alpine 3.24libjpeg-turbo2.0.6-r0
Debian 12libjpeg-turbo1:2.0.6-1
Debian 13libjpeg-turbo1:2.0.6-1
Debian 14libjpeg-turbo1:2.0.6-1
SUSE Linux Enterprise Micro 5.1libjpeg-turbo1.5.3-150000.32.5.1
SUSE Linux Enterprise Micro 5.2libjpeg-turbo1.5.3-150000.32.5.1
SUSE Linux Enterprise Module for Basesystem 15 SP3libjpeg-turbo1.5.3-150000.32.5.1
SUSE Linux Enterprise Module for Basesystem 15 SP3libjpeg62-turbo1.5.3-150000.32.5.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP3libjpeg-turbo1.5.3-150000.32.5.1
SUSE Linux Enterprise Module for Package Hub 15 SP3libjpeg-turbo1.5.3-150000.32.5.1
SUSE Linux Enterprise Server 12 SP5libjpeg-turbo1.5.3-31.28.1
SUSE Linux Enterprise Server 12 SP5libjpeg62-turbo1.5.3-31.28.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5libjpeg-turbo1.5.3-31.28.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5libjpeg62-turbo1.5.3-31.28.1
SUSE Linux Enterprise Software Development Kit 12 SP5libjpeg-turbo1.5.3-31.28.1
SUSE Linux Enterprise Software Development Kit 12 SP5libjpeg62-turbo1.5.3-31.28.1
Ubuntu 18.04 LTSlibjpeg-turbo1.5.2-0ubuntu5.18.04.6
Ubuntu 20.04 LTSlibjpeg-turbo2.0.3-0ubuntu1.20.04.3
openSUSE Leap 15.3libjpeg-turbo1.5.3-150000.32.5.1
openSUSE Leap 15.3libjpeg62-turbo1.5.3-150000.32.5.1
openSUSE Leap 15.4libjpeg62-turbo1.5.3-150000.32.5.1
openSUSE Leap Micro 5.2libjpeg-turbo1.5.3-150000.32.5.1