Medium severity6.5NVD Advisory· Published Jun 2, 2022· Updated Jun 17, 2026

CVE-2022-31796

Description

libjpeg 1.63 has a heap-based buffer over-read in HierarchicalBitmapRequester::FetchRegion in hierarchicalbitmaprequester.cpp because the MCU size can be different between allocation and use.

Affected products

libjpeg/libjpegdescription
Libjpeg Turbo/Libjpeg Turbollm-fuzzy
Range: <1.63
Thorfdbg/libjpegllm-fuzzy
Range: <1.63
Jpeg/Libjpeg
cpe:2.3:a:jpeg:libjpeg:1.63:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

github.com/thorfdbg/libjpeg/commit/187035b9726710b4fe11d565c7808975c930895dnvdPatchThird Party Advisory
github.com/thorfdbg/libjpeg/issues/71nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000