Security vulnerability affects the libjpeg-turbo package. A crafted input file could cause a null pointer dereference in jcopy sample rows() when processed by libjpeg-turbo.