← All advisories

Medium severity6.5NVD Advisory· Published Jun 10, 2022· Updated Jun 17, 2026

CVE-2022-32978

CVE-2022-32978

Description

There is an assertion failure in SingleComponentLSScan::ParseMCU in singlecomponentlsscan.cpp in libjpeg before 1.64 via an empty JPEG-LS scan.

Affected products

3

Jpeg/Libjpeg
cpe:2.3:a:jpeg:libjpeg:*:*:*:*:*:*:*:*
Range: <1.64
libjpeg/libjpegdescription
Libjpeg Turbo/Libjpeg Turbollm-fuzzy
Range: <1.64

Patches

Vulnerability mechanics

References

2

github.com/thorfdbg/libjpeg/commit/4746b577931e926a49e50de9720a4946de3069a7nvdPatchThird Party Advisory
github.com/thorfdbg/libjpeg/issues/75nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.