CVE-2020-35538

MediumCVSS 5.5/10Last modified Nov 2, 2026

Description

A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
n/alibjpeg-turbolibjpeg-turbo 2.0.5 onwards

References

Timeline

Published
Aug 31, 2022
Last modified
Nov 2, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-35547.5A vulnerability in the TCP packet processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) SoCVE-2020-355425.4Unisys Data Exchange Management Studio through 5.0.34 doesn't sanitize the input to a HTML document field. This could be used for an XSS attCVE-2020-355459.8Time-based SQL injection exists in Spotweb 1.4.9 via the query string.CVE-2020-355469.1Lexmark MX6500 LW75.JD.P296 and previous devices have Incorrect Access Control via the access control settings.CVE-2020-355479.1A library index page in NuPoint Messenger in Mitel MiCollab before 9.2 FP1 could allow an unauthenticated attacker to gain access (view and CVE-2020-355485.5An issue was discovered in Finder on Samsung mobile devices with Q(10.0) software. A call to a non-existent provider allows attackers to cauCVE-2020-355495.5An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Any application may establish itself as the defCVE-2020-35557.5A vulnerability in the SIP inspection process of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) SCVE-2020-355509.8An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software. Attackers can bypass Factory Reset ProCVE-2020-355519.8An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software. They allow attackers to conduCVE-2020-355525.3An issue was discovered in the GPS daemon on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (non-Qualcomm chipsets) software. AttacCVE-2020-355537.5An issue was discovered on Samsung mobile devices with Q(10.0) and R(11.0) (Qualcomm SM8250 chipsets) software. They allows attackers to cau
CVE-2020-35538: Medium severity, CVSS 5.5 | Vulnix