{"id":"CVE-2022-32325","aliases":["DEBIAN-CVE-2022-32325","EUVD-2022-53504","GHSA-4m45-43xg-8rr7","MGASA-2023-0023","OESA-2024-1438","UBUNTU-CVE-2022-32325"],"status":"published","title":"JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ...","description":"JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00991,"percentile":0.62834,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2022-07-01T00:00:00Z","modified":"2026-10-28T02:31:11Z","fixes":[{"ecosystem":"Mageia:8","package":"jpegoptim","fixed_in":["1.5.1-1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"jpegoptim","fixed_in":["1.5.5-1.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"jpegoptim","fixed_in":["1.5.5-1.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"jpegoptim","fixed_in":["1.5.5-1.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"jpegoptim","fixed_in":["1.5.5-1.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"jpegoptim","fixed_in":["1.5.5-1.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"jpegoptim","fixed_in":["1.5.5-1.oe2203sp3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"jpegoptim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.7-1"]},{"source":"osv","ecosystem":"Debian:13","package":"jpegoptim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.7-1"]},{"source":"osv","ecosystem":"Debian:14","package":"jpegoptim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.7-1"]},{"source":"osv","ecosystem":"Mageia:8","package":"jpegoptim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"jpegoptim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.5-1.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"jpegoptim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.5-1.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"jpegoptim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.5-1.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"jpegoptim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.5-1.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"jpegoptim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.5-1.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"jpegoptim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.5-1.oe2203sp3"}]}]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"jpegoptim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.7-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"jpegoptim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.7-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"jpegoptim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.7-1build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"jpegoptim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.7-1","1.4.7-1build1"]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"jpegoptim_project","product":"jpegoptim"}],"references":[{"url":"https://github.com/tjko/jpegoptim/issues/107","tags":["x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XRPXTW3IARYQVKZBPIPIEKABN7DSS5XY/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32325","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XRPXTW3IARYQVKZBPIPIEKABN7DSS5XY/"},{"url":"https://github.com/advisories/GHSA-4m45-43xg-8rr7"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/32xxx/CVE-2022-32325.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-32325","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0023.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31424","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/XRPXTW3IARYQVKZBPIPIEKABN7DSS5XY/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1438","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-32325","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-32325","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-32325","description":"JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.","status":"published","published":"2022-07-01T00:00:00Z","modified":"2024-08-03T07:39:50.655Z","updated_at":"2026-11-02T14:34:36.917505Z"}],"euvd":[{"id":"EUVD-2022-53504","description":"JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.","status":"published","published":"2022-07-01T00:00:00Z","modified":"2024-08-03T07:39:50Z","updated_at":"2026-11-03T03:25:31.965622Z"}],"ghsa":[{"id":"GHSA-4m45-43xg-8rr7","title":"JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ...","description":"JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.","status":"published","published":"2022-07-02T00:00:21Z","modified":"2023-01-29T05:03:44Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:45:23.726919Z"}],"nvd":[{"id":"CVE-2022-32325","description":"JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.","status":"published","published":"2022-07-01T22:15:07.993Z","modified":"2026-06-17T04:47:07.017Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:07:22.966735Z"}],"osv":[{"id":"DEBIAN-CVE-2022-32325","description":"JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.","status":"published","published":"2022-07-01T22:15:07.993Z","modified":"2026-11-03T08:01:49.335942241Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T08:24:50.542442Z"},{"id":"OESA-2024-1438","title":"jpegoptim security update","description":"Jpegoptim is an utility to optimize JPEG files. Provides lossless optimization (based on optimizing the Huffman tables) and \u0026quot;lossy\u0026quot; optimization based on setting maximum quality factor.\r\n\r\nSecurity Fix(es):\r\n\r\nJPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.(CVE-2022-32325)","status":"published","published":"2024-04-12T11:06:53Z","modified":"2026-08-18T01:18:21.754197433Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"UBUNTU-CVE-2022-32325","description":"JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.","status":"published","published":"2022-07-01T22:15:00Z","modified":"2026-10-17T12:56:17.051426666Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:53:54.697021Z"},{"id":"CVE-2022-32325","description":"JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.","status":"published","published":"2022-07-01T00:00:00Z","modified":"2026-10-28T02:31:11.249019708Z","updated_at":"2026-11-02T15:44:25.860945Z"},{"id":"MGASA-2023-0023","title":"Updated jpegoptim packages fix security vulnerability","description":"JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which\nis caused by a READ memory access at jpegoptim.c. (CVE-2022-32325)\n","status":"published","published":"2023-01-24T07:58:25Z","modified":"2026-04-16T04:41:33.296620098Z","updated_at":"2026-11-02T15:49:42.263076Z"}]}}