CVE-2020-8175: Jpeg-Js Project Jpeg-Js

Medium severity, CVSS 5.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Uncontrolled resource consumption in `jpeg-js` before 0.4.0 may allow attacker to launch denial of service attacks using specially a crafted JPEG image.

Affected products

• Jpeg-Js Project Jpeg-Js: before 0.4.0 (fixed in 0.4.0)

Published 2020-07-24. Last modified 2026-06-17.