CVE-2022-32978

CVE-2022-32978 affects the libjpeg library prior to 1.64, caused by an assertion failure in SingleComponentLSScan::ParseMCU when processing an empty JPEG-LS scan. This leads to denial of service and is documented across multiple sources; no exploitation details are provided beyond the assertion f...

CVE-2023-37837

CVE-2023-37837 describes a heap buffer overflow in libjpeg, specifically in LineBitmapRequester::EncodeRegion (linebitmaprequester.cpp). The vulnerability can be triggered by a crafted file, enabling a Denial of Service (DoS). Affected component is libjpeg; root cause is a heap overflow in the En...

CVE-2023-37836

CVE-2023-37836 affects libjpeg due to a reachable assertion in BitmapHook::BitMapHook (bitmaphook.cpp) that can be triggered by a crafted file to cause a Denial of Service. The vulnerability relies on a specific commit (db33a6e) and is documented across multiple sources in the connected set; no v...