Libjpeg Project Libjpeg — known CVE vulnerabilities

Every CVE whose affected-product data names Libjpeg Project Libjpeg, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-31620 — CVSS 6.5 (medium): In libjpeg before 1.64, BitStream<false>::Get in bitstream.hpp has an assertion failure that may cause denial of service. This is related…
• CVE-2022-32201 — CVSS 5.5 (medium): In libjpeg 1.63, there is a NULL pointer dereference in Component::SubXOf in component.hpp.
• CVE-2022-32202 — CVSS 5.5 (medium): In libjpeg 1.63, there is a NULL pointer dereference in LineBuffer::FetchRegion in linebuffer.cpp.