PT-2020-5652 · Libjpeg Turbo+9 · Libjpeg-Turbo+9

Sanjeevk001 · Published 2020-06-03 · Updated 2025-05-15 · CVE-2020-13790

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions libjpeg-turbo versions 2.0.4 and earlier mozjpeg version 4.0.0

Description The issue is related to a heap-based buffer over-read in the get rgb row() function in rdppm.c via a malformed PPM input file. This can allow a remote attacker to access confidential data and cause a denial of service. The start input ppm function from rdppm.c in the libjpeg-turbo library is also affected by a buffer data boundary reading issue.

Recommendations For libjpeg-turbo version 2.0.4, consider updating to a newer version that addresses the buffer over-read issue in get rgb row(). For mozjpeg version 4.0.0, restrict the use of malformed PPM input files to minimize the risk of exploitation until a patch is available. As a temporary workaround, consider disabling the get rgb row() function in rdppm.c until a patch is available.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALSA-2025:7540

ALT-PU-2020-2229

ALT-PU-2020-2252

ALT-PU-2021-1392

BDU:2021-01352

CESA-2025_7540

CVE-2020-13790

DLA-2302-1

INFSA-2025_7540

MGASA-2020-0267

OPENSUSE-SU-2020:1413-1

OPENSUSE-SU-2020:1458-1

OPENSUSE-SU-2020_1413-1

OPENSUSE-SU-2020_1458-1

OPENSUSE-SU-2024:10952-1

RHSA-2025:7540

RHSA-2025_7540

SUSE-SU-2020:2569-1

SUSE-SU-2020:2570-1

SUSE-SU-2020_2569-1

SUSE-SU-2020_2570-1

USN-4386-1

Affected Products

Alt Linux

Almalinux

Centos

Linuxmint

Red Hat

Rocky Linux

Suse

Ubuntu

Libjpeg-Turbo

Mozjpeg

References · 60

• 🔥 https://github.com/libjpeg-turbo/libjpeg-turbo/issues/433 · Exploit
• https://github.com/libjpeg-turbo/libjpeg-turbo/commit/3de15e0c344d11d4b90f4a47136467053eb2d09a · Patch
• https://osv.dev/vulnerability/USN-4386-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:2569-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2025:7540 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-7540.html · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2020-13790 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2020-0267 · Vendor Advisory
• https://security.gentoo.org/glsa/202010-03 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-13790 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2020-13790 · Vendor Advisory
• https://usn.ubuntu.com/4386-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/U6563YHSVZK24MPJXGJVK3CQG7JVWZGK · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:2570-1 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2302-1 · Vendor Advisory