CVE-2022-31620

6.5 mediumEPSS 1.4%

Medium (6.5) in libjpeg project libjpeg. EPSS 1.4% chance of exploitation in the next 30 days.

In libjpeg before 1.64, BitStream<false>::Get in bitstream.hpp has an assertion failure that may cause denial of service. This is related to out-of-bounds array access during arithmetically coded lossless scan or arithmetically coded sequential scan.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-617
Published: 2022-05-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

libjpeg_project:libjpeg

References

https://github.com/thorfdbg/libjpeg/commit/ef4a29a62ab48b8dc235f4af52cfd6319eda9a6a
https://github.com/thorfdbg/libjpeg/issues/70
https://github.com/thorfdbg/libjpeg/commit/ef4a29a62ab48b8dc235f4af52cfd6319eda9a6a
https://github.com/thorfdbg/libjpeg/issues/70

Check your stack JSON