CVE catalog

CVE-2022-35434

jpegqs: CVE-2022-35434

[CVE catalog]

Severity
Medium
Source
[NVD] · [CVE record]
EPSS
0.46% · Oct 25, 2026

jpeg-quantsmooth before commit 8879454 contained a floating point exception (FPE) via /jpeg-quantsmooth/jpegqs+0x4f5d6c.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianjpegqssid1.20210408-3fixed
Debianjpegqsforky1.20210408-3fixed
Debianjpegqstrixie1.20210408-3fixed
Debianjpegqsbookworm1.20210408-3fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianjpegqssourcesid1.20210408-3not yet assignedNot reported[1017608]
Debianjpegqssourceforky1.20210408-3not yet assignedNot reported[1017608]
Debianjpegqssourcetrixie1.20210408-3not yet assignedNot reported[1017608]
Debianjpegqssourcebookworm1.20210408-3not yet assignedNot reported[1017608]

[Debian bug #1017608]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [jpegqs]Fixed
    Details (2)

    • 1.20210408-3 · amd64 · bookworm

      Fixed · Fixed: 1.20210408-3

      dsa · jpegqs · debian · bookworm

    • 1.20210408-3 · arm64 · bookworm

      Fixed · Fixed: 1.20210408-3

      dsa · jpegqs · debian · bookworm

Observed:

References

[Debian Security Tracker] · [FIRST EPSS]