CVE-2020-13790

A vulnerability was found in libjpeg-turbo, where a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.

This vulnerability is rated as a moderate because a heap-based buffer over-read exists in the get_rgb_row() function within rdppm.c when processing a malformed PPM input file, this issue may lead to information leakage or crashes, it does not inherently allow code execution or privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.