CVE-2022-31796

Name of the Vulnerable Software and Affected Versions libjpeg version 1.63

Description The issue is a heap-based buffer over-read in the HierarchicalBitmapRequester::FetchRegion function, located in hierarchicalbitmaprequester.cpp. This occurs because the MCU size can differ between allocation and use, leading to potential memory access issues.

Recommendations For libjpeg version 1.63, consider applying a patch or fix that addresses the heap-based buffer over-read issue in the HierarchicalBitmapRequester::FetchRegion function. As a temporary workaround, restrict the use of the HierarchicalBitmapRequester::FetchRegion function until a patch is available.