CVE-2022-31620: Medium severity libjpeg vulnerability
Published May 25, 2022
·Updated
In libjpeg before 1.64, BitStream<false>::Get in bitstream.hpp has an assertion failure that may cause denial of service. This is related to out-of-bounds array access during arithmetically coded lossless scan or arithmetically coded sequential scan.
Affected Software
1 affected component
Libjpeg Project Libjpeg<1.64
Remediation
Event History
May 25, 2022
CVE Published
via MITRE·08:06 PM
Data Sourced
via MITRE·08:06 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-31620?
CVE-2022-31620 has a medium severity rating due to its potential for denial of service.
2
How do I fix CVE-2022-31620?
To fix CVE-2022-31620, upgrade libjpeg to version 1.64 or later.
3
What is the exploit method for CVE-2022-31620?
CVE-2022-31620 can be exploited through out-of-bounds array access during specific types of image scans.
4
What software versions are affected by CVE-2022-31620?
Libjpeg versions prior to 1.64 are affected by CVE-2022-31620.
5
Is CVE-2022-31620 related to data corruption?
CVE-2022-31620 does not directly cause data corruption but may result in denial of service during image processing.