In libjpeg 1.63, there is a NULL pointer dereference in Component::SubXOf in component.hpp.
[
{
"id": "CVE-2022-32201-4b97e4f0",
"target": {
"file": "marker/scan.cpp"
},
"signature_version": "v1",
"source": "https://github.com/thorfdbg/libjpeg/commit/ea6315164b1649ff932a396b7600eac4bffcfaba",
"signature_type": "Line",
"digest": {
"line_hashes": [
"311757797010460833641897164424202540036",
"295162356299213819673861938095861339626",
"30399755710260585209482245519824113989",
"176088570998040371814026754175630956684"
],
"threshold": 0.9
},
"deprecated": false
},
{
"id": "CVE-2022-32201-94a1ea10",
"target": {
"function": "Scan::CreateParser",
"file": "marker/scan.cpp"
},
"signature_version": "v1",
"source": "https://github.com/thorfdbg/libjpeg/commit/ea6315164b1649ff932a396b7600eac4bffcfaba",
"signature_type": "Function",
"digest": {
"function_hash": "214198880085940486430095362462972688714",
"length": 5598.0
},
"deprecated": false
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-32201.json"
"2026-04-12T02:56:58Z"
[
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "1.63"
}
]
}
]