PatchTheCVEjpegoptim vulnerabilities and fixes
Recent CVEs affecting jpegoptim, with upgrade or downgrade steps. 2 tracked.
jpegoptim has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-03-15. Highest priority: CVE-2022-32325 (score 43/100).
- CVE-2023-27781 HIGH 7.8 DOWNGRADE jpegoptim v1.5.2 was discovered to contain a heap overflow in the optimize function at jpegoptim.c.
- CVE-2022-32325 MEDIUM 6.5 DOWNGRADE MITIGATE JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at
FAQ
How do I fix jpegoptim vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jpegoptim being exploited right now?
None of the tracked jpegoptim CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which jpegoptim CVE should I patch first?
CVE-2022-32325 currently ranks highest (43/100): JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at.