CVE-2022-34999

MEDIUM

JPEGDEC commit be4843c was discovered to contain a FPE via DecodeJPEG at /src/jpeg.inl.

Affects 1 product across 1 vendor.

CVSS 3.15.5
EPSS0.5%
Percentile39th
PatchUnknown
CVSS Vector — Plain English Requires local access, low complexity, no authentication required, requires user interaction, impact contained to the vulnerable component, no confidentiality impact, no integrity impact, full availability impact.
CWE Weakness Definitions
CWE-697: CWE-697
Related Attack Patterns (CAPEC)
CAPEC-3 Using Leading 'Ghost' Character Sequences to Bypass Input Filters
via CWE-697
CAPEC-7 Blind SQL Injection
via CWE-697
CAPEC-8 Buffer Overflow in an API Call
via CWE-697
CAPEC-9 Buffer Overflow in Local Command-Line Utilities
via CWE-697
CAPEC-10 Buffer Overflow via Environment Variables
via CWE-697
Show all 29

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

A Floating Point Exception (FPE) vulnerability was identified in the JPEGDEC library at commit be4843c, affecting the DecodeJPEG function located in /src/jpeg.inl. This issue could lead to unexpected behavior or crashes when processing specific JPEG images.

BSID: BS-2022-GLOBAL-321620-M • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2022-34999?
A Floating Point Exception (FPE) vulnerability was identified in the JPEGDEC library at commit be4843c, affecting the DecodeJPEG function located in /src/jpeg.inl. This issue could lead to unexpected behavior or crashes when processing specific JPEG images.
What is the CVSS score for CVE-2022-34999?
CVE-2022-34999 has CVSS 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. EPSS: 0.5%.
Is CVE-2022-34999 actively exploited?
No confirmed active exploitation of CVE-2022-34999 as of 2026-05-30.
How do I remediate CVE-2022-34999?
Priority: MEDIUM.
What systems are affected by CVE-2022-34999?
CVE-2022-34999 affects Bitbanksoftware Jpegdec.
Vulnerability Details
CVE IDCVE-2022-34999
BSIDBS-2022-GLOBAL-321620-M BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Published2022-08-16
Last Modified2024-11-21
ICS Relevance0%
Weakness (CWE)
CWE-697
SourceNVD
Official Description

JPEGDEC commit be4843c was discovered to contain a FPE via DecodeJPEG at /src/jpeg.inl.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

An attacker could exploit this vulnerability by crafting a malicious JPEG image that, when processed by the DecodeJPEG function, triggers a floating point exception. This could potentially lead to a denial of service or, in some cases, could be leveraged for further attacks if the application does not handle exceptions properly.

Exploitation Likelihood: MEDIUM

Affected Products
VendorProductAffected Versions
Bitbanksoftware Jpegdec 1.2.7
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 1521 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hashb372c7a893484211ee765ffef5b18218f03b67c0a8680a7f72b102a17f0adda49bafe2f63f5382c5facf6864c68b7ec57352a8b62168ea8abfd7dd1584df4bc0
Related CVEs affecting Bitbanksoftware
CVE-2022-34998 7.8 JPEGDEC commit be4843c was discovered to contain a global buffer overflow via... CVE-2022-35003 7.8 JPEGDEC commit be4843c was discovered to contain a global buffer overflow via... CVE-2022-35000 5.5 JPEGDEC commit be4843c was discovered to contain a segmentation fault via fse... CVE-2022-35002 5.5 JPEGDEC commit be4843c was discovered to contain a segmentation fault via TIF... CVE-2022-35004 5.5 JPEGDEC commit be4843c was discovered to contain a FPE via TIFFSHORT at /src/...
View all Bitbanksoftware CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →