{"affected":[{"product":"libjpeg-turbo","source":"CNA: redhat","vendor":"n/a","versions":[{"status":"affected","version":"libjpeg-turbo 2.0.5 onwards"}]}],"cveId":"CVE-2020-35538","cwes":["CWE-476"],"description":"A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.","epss":{"date":"2026-11-02","percentile":0.21133,"score":0.00286},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793642109707,"publishedAt":1661959984000,"references":[{"source":"CNA: redhat","tags":["x_refsource_MISC"],"url":"https://github.com/libjpeg-turbo/libjpeg-turbo/issues/441"},{"source":"CNA: redhat","tags":["x_refsource_MISC"],"url":"https://github.com/libjpeg-turbo/libjpeg-turbo/commit/9120a247436e84c0b4eea828cb11e8f665fcde30"},{"source":"ADP: CVE","tags":["x_refsource_MISC","x_transferred"],"url":"https://github.com/libjpeg-turbo/libjpeg-turbo/issues/441"},{"source":"ADP: CVE","tags":["x_refsource_MISC","x_transferred"],"url":"https://github.com/libjpeg-turbo/libjpeg-turbo/commit/9120a247436e84c0b4eea828cb11e8f665fcde30"}],"remediation":[],"revision":"de18320bfcf44cae1b3baa1e5751f829bfd0d9c59051e33171b93a7f50dbacda","sources":[{"modifiedAt":1793642109707,"name":"CNA: redhat","retrievedAt":1793642920997,"url":"https://www.cve.org/CVERecord?id=CVE-2020-35538"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793642932449,"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-35538"}],"ssvc":{"assessedAt":1793642091406,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"CVE-2020-35538","updatedAt":1793642932449}