CVE-2022-31796

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-31796
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-31796.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-31796
Downstream
Published
2022-05-29T16:37:32Z
Modified
2026-07-23T08:25:05.286842Z
Summary
[none]
Details

libjpeg 1.63 has a heap-based buffer over-read in HierarchicalBitmapRequester::FetchRegion in hierarchicalbitmaprequester.cpp because the MCU size can be different between allocation and use.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31796.json",
    "cna_assigner": "mitre"
}
References

Affected packages

Git / github.com/thorfdbg/libjpeg

Affected ranges

Type
GIT
Repo
https://github.com/thorfdbg/libjpeg
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
187035b9726710b4fe11d565c7808975c930895d
Database specific
Show details 
{
    "source": "REFERENCES"
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-31796.json"
vanir_signatures_modified 
"2026-07-23T08:25:05Z"
vanir_signatures 
[
    {
        "source": "https://github.com/thorfdbg/libjpeg/commit/187035b9726710b4fe11d565c7808975c930895d",
        "target": {
            "file": "control/hierarchicalbitmaprequester.cpp",
            "function": "HierarchicalBitmapRequester::PrepareForDecoding"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "length": 967.0,
            "function_hash": "119444156195613824511099033342764519263"
        },
        "deprecated": false,
        "id": "CVE-2022-31796-8bccecfc"
    },
    {
        "source": "https://github.com/thorfdbg/libjpeg/commit/187035b9726710b4fe11d565c7808975c930895d",
        "target": {
            "file": "control/hierarchicalbitmaprequester.cpp"
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "275194022272869071068134012543535481483",
                "268265372830608522807979456787937917286",
                "262621107754778797773294723602385097369",
                "294690950030755224121112201988537691422"
            ]
        },
        "deprecated": false,
        "id": "CVE-2022-31796-a8404c91"
    }
]