CVE-2022-32978

Опубликовано: 10 июн. 2022

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

There is an assertion failure in SingleComponentLSScan::ParseMCU in singlecomponentlsscan.cpp in libjpeg before 1.64 via an empty JPEG-LS scan.

Ссылки

https://github.com/thorfdbg/libjpeg/commit/4746b577931e926a49e50de9720a4946de3069a7
Patch
Third Party Advisory
https://github.com/thorfdbg/libjpeg/issues/75
Exploit
Issue Tracking
Third Party Advisory
https://github.com/thorfdbg/libjpeg/commit/4746b577931e926a49e50de9720a4946de3069a7
Patch
Third Party Advisory
https://github.com/thorfdbg/libjpeg/issues/75
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:jpeg:libjpeg:*:*:*:*:*:*:*:*

Версия до 1.64 (исключая)

EPSS

Процентиль: 47%

0.00238

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-617

Связанные уязвимости

CVE-2022-32978

CVSS3: 6.5

ubuntu

больше 3 лет назад

There is an assertion failure in SingleComponentLSScan::ParseMCU in singlecomponentlsscan.cpp in libjpeg before 1.64 via an empty JPEG-LS scan.

CVE-2022-32978

CVSS3: 6.5

debian

больше 3 лет назад

There is an assertion failure in SingleComponentLSScan::ParseMCU in si ...

GHSA-5p95-6qmc-hjqr

CVSS3: 6.5

github

больше 3 лет назад

There is an assertion failure in SingleComponentLSScan::ParseMCU in singlecomponentlsscan.cpp in libjpeg before 1.64 via an empty JPEG-LS scan.

EPSS

Процентиль: 47%

0.00238

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-617