Libjpeg Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Libjpeg Project records in CISA KEV

No Libjpeg Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Libjpeg · all components

TI-2022-13544 CVE-2022-31620 · GHSA-62v2-wx44-h68c

LOW 32

In libjpeg before 1.64, BitStream<false>::Get in bitstream.hpp has an assertion failure that may cause denial of service.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01427 Published 2022-05-25 No fix listed CWE-617

TI-2022-13912 CVE-2022-32202 · GHSA-5f75-4873-qcw8

LOW 26

In libjpeg 1.63, there is a NULL pointer dereference in LineBuffer::FetchRegion in linebuffer.cpp.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00711 Published 2022-06-01 No fix listed CWE-476

TI-2022-13911 CVE-2022-32201 · GHSA-v4h5-8wcv-2mq2

LOW 26

In libjpeg 1.63, there is a NULL pointer dereference in Component::SubXOf in component.hpp.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00717 Published 2022-06-01 No fix listed CWE-476