CVE-2022-32201

MEDIUM

Libjpeg - NULL Pointer Dereference

Title source: rule

In libjpeg 1.63, there is a NULL pointer dereference in Component::SubXOf in component.hpp.

Core 2

Core References

Patch, Third Party Advisory x_refsource_misc

Exploit, Issue Tracking, Third Party Advisory x_refsource_misc

CVSS v3 5.5

EPSS 0.0014

EPSS Percentile 33.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE

CWE-476

Status published

Products (1)

libjpeg_project/libjpeg 1.63

Published Jun 02, 2022

Tracked Since Feb 18, 2026