CVE-2020-17541: Libjpeg-Turbo

High severity, CVSS 8.8. EPSS: 2.7% chance of exploitation in the next 30 days.

Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A remote attacker can send a malformed jpeg file to the service and cause arbitrary code execution or denial of service of the target service.

Affected products

• Libjpeg-Turbo Libjpeg-Turbo: before 2.0.4 (fixed in 2.0.4)

Published 2021-06-01. Last modified 2026-06-17.