CVE-2021-39520: Null Pointer Dereference
An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function BlockBitmapRequester::PushReconstructedData() located in blockbitmaprequester.cpp. It allows an attacker to cause Denial of Service.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-39520?
CVE-2021-39520 is a vulnerability found in libjpeg, specifically in the function BlockBitmapRequester::PushReconstructedData() located in blockbitmaprequester.cpp, that allows an attacker to cause a Denial of Service (DoS) by exploiting a NULL pointer dereference.
What is the severity of CVE-2021-39520?
CVE-2021-39520 has a severity rating of 6.5 (medium).
Which software is affected by CVE-2021-39520?
The vulnerability affects libjpeg with version up to and including 2020021.
How can an attacker exploit CVE-2021-39520?
An attacker can exploit CVE-2021-39520 by triggering a NULL pointer dereference in the BlockBitmapRequester::PushReconstructedData() function in libjpeg, leading to a Denial of Service (DoS) condition.
Is there a fix available for CVE-2021-39520?
At the moment, there is no known fix or patch available for CVE-2021-39520. It is recommended to stay updated with the latest security advisories and patches from the vendor.