{"id":"CVE-2022-31796","details":"libjpeg 1.63 has a heap-based buffer over-read in HierarchicalBitmapRequester::FetchRegion in hierarchicalbitmaprequester.cpp because the MCU size can be different between allocation and use.","modified":"2026-07-23T08:25:05.286842Z","published":"2022-05-29T16:37:32Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31796.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31796.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-31796"},{"type":"REPORT","url":"https://github.com/thorfdbg/libjpeg/issues/71"},{"type":"FIX","url":"https://github.com/thorfdbg/libjpeg/commit/187035b9726710b4fe11d565c7808975c930895d"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/thorfdbg/libjpeg","events":[{"introduced":"0"},{"fixed":"187035b9726710b4fe11d565c7808975c930895d"}],"database_specific":{"source":"REFERENCES"}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-31796.json","vanir_signatures_modified":"2026-07-23T08:25:05Z","vanir_signatures":[{"digest":{"function_hash":"119444156195613824511099033342764519263","length":967},"id":"CVE-2022-31796-8bccecfc","signature_type":"Function","signature_version":"v1","source":"https://github.com/thorfdbg/libjpeg/commit/187035b9726710b4fe11d565c7808975c930895d","target":{"file":"control/hierarchicalbitmaprequester.cpp","function":"HierarchicalBitmapRequester::PrepareForDecoding"},"deprecated":false},{"id":"CVE-2022-31796-a8404c91","signature_type":"Line","signature_version":"v1","source":"https://github.com/thorfdbg/libjpeg/commit/187035b9726710b4fe11d565c7808975c930895d","target":{"file":"control/hierarchicalbitmaprequester.cpp"},"deprecated":false,"digest":{"line_hashes":["275194022272869071068134012543535481483","268265372830608522807979456787937917286","262621107754778797773294723602385097369","294690950030755224121112201988537691422"],"threshold":0.9}}]}}],"schema_version":"1.7.5"}