CVE catalog

CVE-2022-32202

libjpeg: CVE-2022-32202

[CVE catalog]

Severity
Low
Source
[NVD] · [CVE record]
EPSS
0.71% · Oct 25, 2026

In libjpeg 1.63, there is a NULL pointer dereference in LineBuffer::FetchRegion in linebuffer.cpp.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibjpegsid0.0~git20250815.25f7128-3fixed
Debianlibjpegforky0.0~git20250815.25f7128-3fixed
Debianlibjpegtrixie0.0~git20241105.c719010-1fixed
Debianlibjpegbookworm0.0~git20220805.54ec643-1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibjpegsourcesid0.0~git20220615.842c7ba-1unimportantNot reportedNot reported
Debianlibjpegsourceforky0.0~git20220615.842c7ba-1unimportantNot reportedNot reported
Debianlibjpegsourcetrixie0.0~git20220615.842c7ba-1unimportantNot reportedNot reported
Debianlibjpegsourcebookworm0.0~git20220615.842c7ba-1unimportantNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libjpeg-tools]Fixed

    Source package: [libjpeg]

    Details (2)

    • 0.0~git20220805.54ec643-1 · amd64 · bookworm

      Fixed · Fixed: 0.0~git20220615.842c7ba-1

      dsa · libjpeg · debian · bookworm

    • 0.0~git20220805.54ec643-1 · arm64 · bookworm

      Fixed · Fixed: 0.0~git20220615.842c7ba-1

      dsa · libjpeg · debian · bookworm

Observed:

References

[Debian Security Tracker] · [FIRST EPSS]