Medium severity6.5NVD Advisory· Published May 25, 2022· Updated Jun 17, 2026

CVE-2022-31620

Description

In libjpeg before 1.64, BitStream::Get in bitstream.hpp has an assertion failure that may cause denial of service. This is related to out-of-bounds array access during arithmetically coded lossless scan or arithmetically coded sequential scan.

Affected products

libjpeg/libjpegdescription
Thorfdbg/libjpegllm-fuzzy
Range: <1.64
Libjpeg Turbo/Libjpeg Turbollm-fuzzy
Range: <1.64

Patches

Vulnerability mechanics

References

github.com/thorfdbg/libjpeg/commit/ef4a29a62ab48b8dc235f4af52cfd6319eda9a6anvdPatchThird Party Advisory
github.com/thorfdbg/libjpeg/issues/70nvdExploitIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000