Medium
Security advisory
A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2020-35538
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 12:41 UTC · Revision 1
Source evidence
A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.
osv:CVE-2020-35538
Complete source record
{
"id": "f0cda262597e2979c740391ac6059db8cddecc141e7910600975330cd7be00cc",
"url": "https://osv.dev/vulnerability/CVE-2020-35538",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2020-35538",
"summary": "A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.",
"evidence": "osv:CVE-2020-35538",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2020-35538",
"aliases": [
"CVE-2020-35538"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/libjpeg-turbo/libjpeg-turbo",
"type": "GIT",
"events": [
{
"introduced": "ae87a958613b69628b92088b313ded0d4f59a716"
},
{
"last_affected": "ae87a958613b69628b92088b313ded0d4f59a716"
},
{
"fixed": "9120a247436e84c0b4eea828cb11e8f665fcde30"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:libjpeg-turbo:libjpeg-turbo:2.0.5:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.0.5"
},
{
"last_affected": "2.0.5"
}
],
"source": "CPE_STRING"
},
{
"range": [
{
"fixed": "9120a247436e84c0b4eea828cb11e8f665fcde30"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"2.0.5"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-35538.json",
"vanir_signatures": [
{
"id": "CVE-2020-35538-0235bb2a",
"digest": {
"length": 603,
"function_hash": "265843634151006483131552974394884673931"
},
"source": "https://github.com/libjpeg-turbo/libjpeg-turbo/commit/9120a247436e84c0b4eea828cb11e8f665fcde30",
"target": {
"file": "jdapistd.c",
"function": "read_and_discard_scanlines"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-35538-0bae7257",
"digest": {
"threshold": 0.9,
"line_hashes": [
"181966368120032366941064105513048981986",
"130757622764035807867408452650323128862",
"148468202752091834072436320001306080477",
"257437469696217574552189912352508871066",
"299493924240865045620177051481424630288",
"130757622764035807867408452650323128862",
"148468202752091834072436320001306080477",
"257437469696217574552189912352508871066",
"299493924240865045620177051481424630288",
"130757622764035807867408452650323128862",
"148468202752091834072436320001306080477",
"257437469696217574552189912352508871066",
"317069873089784711176508713375962994158",
"130757622764035807867408452650323128862",
"148468202752091834072436320001306080477",
"257437469696217574552189912352508871066",
"317069873089784711176508713375962994158"
]
},
"source": "https://github.com/libjpeg-turbo/libjpeg-turbo/commit/9120a247436e84c0b4eea828cb11e8f665fcde30",
"target": {
"file": "jdmrg565.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-35538-26714275",
"digest": {
"threshold": 0.9,
"line_hashes": [
"237268784250552995541175652939298941038",
"55191835511825742481522714055456362244",
"112355834958750575573568105596699812159",
"224237139694101272170962554643334499701",
"328051725279232414661853760064674746078",
"253794639925774613524378325585668245721",
"125846092632391264446533304425144843259",
"147203280036163601129019641685346657219",
"180906809811973480746865399535825270288",
"141625575501047767186335446051250081561",
"135290092661960144475077398040251142957",
"8590408124891000358319455701479020181",
"278757717391245760887709652039873263318",
"76021362489515449628688346887093641337",
"126869630270763598431727118559660260240",
"197136698201017567640281828773053008370",
"60011215680802189679980522783475759188",
"170536651701987491817927399461139661267",
"306635280722672006270953653714152746115",
"204121736805022547027963271910904160590",
"242208919060422429443051325701268783063",
"128888670045579241477218841042765633394",
"80530395364233498574176638185282104240",
"211634847489080150759209778607155333151",
"254395946641754624402971948159087618652",
"327504252311340424339334814329535426588",
"237541367173410740378298631967014073012",
"131650559601841859356726893896945717576",
"159886534799745430267384968805921237797",
"303406416790282144651630579268375676066",
"64272506902988004113588486900676320192",
"5290566569890969054563321347675907052",
"196333589004114027177534854735662179298",
"100247821976234913424992356894374272767",
"76986284900028722334284982806134461701",
"119796623123453498771734578667216645732",
"742768681174095757254572919127900386",
"57689879670546403725361565131119364898",
"253271889803565610967977539478985488564",
"230355410993193761595788204322038192046",
"135392286263940093509759593081375646361",
"57689879670546403725361565131119364898",
"253271889803565610967977539478985488564",
"332439069149948359466430178194043015557"
]
},
"source": "https://github.com/libjpeg-turbo/libjpeg-turbo/commit/9120a247436e84c0b4eea828cb11e8f665fcde30",
"target": {
"file": "jdapistd.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-35538-36fc8b6b",
"digest": {
"length": 1318,
"function_hash": "316093525420370277793518343943265746671"
},
"source": "https://github.com/libjpeg-turbo/libjpeg-turbo/commit/9120a247436e84c0b4eea828cb11e8f665fcde30",
"target": {
"file": "jdmerge.c",
"function": "jinit_merged_upsampler"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-35538-a7f62b70",
"digest": {
"threshold": 0.9,
"line_hashes": [
"70892377482847834366953529125539066984",
"130757622764035807867408452650323128862",
"148468202752091834072436320001306080477",
"257437469696217574552189912352508871066",
"299493924240865045620177051481424630288",
"130757622764035807867408452650323128862",
"148468202752091834072436320001306080477",
"257437469696217574552189912352508871066",
"317069873089784711176508713375962994158"
]
},
"source": "https://github.com/libjpeg-turbo/libjpeg-turbo/commit/9120a247436e84c0b4eea828cb11e8f665fcde30",
"target": {
"file": "jdmrgext.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-35538-c5c98dc5",
"digest": {
"length": 2968,
"function_hash": "247509968571653446417514822650426219287"
},
"source": "https://github.com/libjpeg-turbo/libjpeg-turbo/commit/9120a247436e84c0b4eea828cb11e8f665fcde30",
"target": {
"file": "jdapistd.c",
"function": "jpeg_skip_scanlines"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-35538-fafb35cf",
"digest": {
"threshold": 0.9,
"line_hashes": [
"180645456824817052808408897351496841324",
"203889657035134582130900891958333288639",
"201628554297190817020169991075128340064",
"145651955308623620032992670355843991528",
"74319098793920260351637285613359830358",
"326022052176365157659020395996810223565",
"299515843417845212477273123721390294826",
"43227223361221685362908990434463023765",
"129319748205436731584906594061602900449",
"160431494193862489672150806838833158256",
"49593323803709527844042354036857800220",
"48351010387531784355421674599475687435",
"200800348807045528895658521134862784779",
"335316210099993036679081807152931794392",
"56360537122590791308906615929830172400",
"72350422029225529142364573773932375092",
"129678296579332195016841279308798647208",
"75998409275993223864484654161506978779",
"187173912838525361726544265525377670685",
"72099892759358203873359430497559547397",
"25952613292090630360919017755225236776",
"259739659780103688388518147721261278903",
"198993528675701779316387221840698144161",
"269976103983235674552990361414136639177",
"13349117891221174468281900462442655111",
"251306433377280336697022295547565705337",
"2367210918062084833701879579340311847",
"100024151174579529850184989740141880427",
"127726722630157579860797519597515475139",
"303062420511852259411097447876866906714",
"239900522348620810549382435787239719494",
"100024151174579529850184989740141880427",
"165628921949227176498018564578882813298",
"75777181108342452606999491878797752446",
"34014465017385179844599098596297214816",
"112995427367408422009645888280718015827",
"132430730090685631029921313423825478604",
"84184275047356337727140265294336304625",
"21230692160302832710441395705289523336",
"232381102007563863971180896093135996113",
"16479522528102647029004836454335133006",
"327322814257340025207597760777318276819"
]
},
"source": "https://github.com/libjpeg-turbo/libjpeg-turbo/commit/9120a247436e84c0b4eea828cb11e8f665fcde30",
"target": {
"file": "jdmerge.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-20T14:12:02Z"
}
}
],
"modified": "2026-10-20T14:12:02.547097842Z",
"provider": "osv",
"references": [
"https://github.com/libjpeg-turbo/libjpeg-turbo/issues/441",
"https://github.com/libjpeg-turbo/libjpeg-turbo/commit/9120a247436e84c0b4eea828cb11e8f665fcde30"
],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2020-35538",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 388705,
"published_at": "2022-08-31T16:15:09.04+00:00"
}