CVE-2022-32325
JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ...
JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.
- Record
CVE-2022-32325- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-125
- Updated
- 2026-11-02
CVE List No score
JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.
- Record
CVE-2022-32325- Updated
- 2026-11-02
EUVDEUVD-2022-53504 No score
JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.
- Record
EUVD-2022-53504- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4m45-43xg-8rr7
JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ...
JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.
- Record
GHSA-4m45-43xg-8rr7- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2022-32325
JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.
- Record
DEBIAN-CVE-2022-32325- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
OSVOESA-2024-1438
jpegoptim security update
Jpegoptim is an utility to optimize JPEG files. Provides lossless optimization (based on optimizing the Huffman tables) and "lossy" optimization based on setting maximum quality factor.
Security Fix(es):
JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.(CVE-2022-32325)
- Record
OESA-2024-1438- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-32325
JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.
- Record
UBUNTU-CVE-2022-32325- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV No score
JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.
- Record
CVE-2022-32325- Updated
- 2026-11-02
OSVMGASA-2023-0023 No score
Updated jpegoptim packages fix security vulnerability
JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c. (CVE-2022-32325)
- Record
MGASA-2023-0023- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
jpegoptimDebian:12 |
All versions, plus listed versions 1.4.7-1 |
None known |
jpegoptimDebian:13 |
All versions, plus listed versions 1.4.7-1 |
None known |
jpegoptimDebian:14 |
All versions, plus listed versions 1.4.7-1 |
None known |
jpegoptimMageia:8 |
before 1.5.1-1.mga8 | 1.5.1-1.mga8 |
jpegoptimopenEuler:20.03-LTS-SP1 |
before 1.5.5-1.oe1 | 1.5.5-1.oe1 |
jpegoptimopenEuler:20.03-LTS-SP4 |
before 1.5.5-1.oe2003sp4 | 1.5.5-1.oe2003sp4 |
jpegoptimopenEuler:22.03-LTS |
before 1.5.5-1.oe2203sp3 | 1.5.5-1.oe2203sp3 |
jpegoptimopenEuler:22.03-LTS-SP1 |
before 1.5.5-1.oe2203sp1 | 1.5.5-1.oe2203sp1 |
jpegoptimopenEuler:22.03-LTS-SP2 |
before 1.5.5-1.oe2203sp2 | 1.5.5-1.oe2203sp2 |
jpegoptimopenEuler:22.03-LTS-SP3 |
before 1.5.5-1.oe2203sp3 | 1.5.5-1.oe2203sp3 |
Show 4 moreShow less
| Package | Affected | Fixed |
|---|---|---|
jpegoptimUbuntu:24.04:LTS |
All versions, plus listed versions 1.4.7-1 |
None known |
jpegoptimUbuntu:25.10 |
All versions, plus listed versions 1.4.7-1 |
None known |
jpegoptimUbuntu:26.10 |
All versions, plus listed versions 1.4.7-1build1 |
None known |
jpegoptimUbuntu:26.04:LTS |
All versions, plus listed versions 1.4.7-11.4.7-1build1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-32325 is a medium vulnerability (CVSS 6.5) in Jpegoptim Project Jpegoptim, published July 1, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.99%, the 62nd percentile. Fixed in jpegoptim 1.5.1-1.mga8.
References
github.com/tjko/jpegoptim/issues/107
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XRPXTW3IARYQVKZBPIPIEKABN7DSS5XY
nvd.nist.gov/vuln/detail/CVE-2022-32325
Show 7 moreShow less
security-tracker.debian.org/tracker/CVE-2022-32325
advisories.mageia.org/MGASA-2023-0023.html
bugs.mageia.org/show_bug.cgi?id=31424
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1438
ubuntu.com/security/CVE-2022-32325
cve.org/CVERecord?id=CVE-2022-32325