Bitbanksoftware Jpegdec — known CVE vulnerabilities

Every CVE whose affected-product data names Bitbanksoftware Jpegdec, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2022-34998 — CVSS 7.8 (high): JPEGDEC commit be4843c was discovered to contain a global buffer overflow via JPEGDecodeMCU at /src/jpeg.inl.
• CVE-2022-35003 — CVSS 7.8 (high): JPEGDEC commit be4843c was discovered to contain a global buffer overflow via ucDitherBuffer at /src/jpeg.inl.
• CVE-2022-34999 — CVSS 5.5 (medium): JPEGDEC commit be4843c was discovered to contain a FPE via DecodeJPEG at /src/jpeg.inl.
• CVE-2022-35000 — CVSS 5.5 (medium): JPEGDEC commit be4843c was discovered to contain a segmentation fault via fseek at /libio/fseek.c.
• CVE-2022-35002 — CVSS 5.5 (medium): JPEGDEC commit be4843c was discovered to contain a segmentation fault via TIFFSHORT at /src/jpeg.inl.
• CVE-2022-35004 — CVSS 5.5 (medium): JPEGDEC commit be4843c was discovered to contain a FPE via TIFFSHORT at /src/jpeg.inl.