In libjpeg 1.63, there is a NULL pointer dereference in Component::SubXOf in component.hpp.
{ "vanir_signatures": [ { "id": "CVE-2022-32201-4b97e4f0", "signature_type": "Line", "target": { "file": "marker/scan.cpp" }, "digest": { "line_hashes": [ "311757797010460833641897164424202540036", "295162356299213819673861938095861339626", "30399755710260585209482245519824113989", "176088570998040371814026754175630956684" ], "threshold": 0.9 }, "source": "https://github.com/thorfdbg/libjpeg/commit/ea6315164b1649ff932a396b7600eac4bffcfaba", "signature_version": "v1", "deprecated": false }, { "id": "CVE-2022-32201-94a1ea10", "signature_type": "Function", "target": { "file": "marker/scan.cpp", "function": "Scan::CreateParser" }, "digest": { "function_hash": "214198880085940486430095362462972688714", "length": 5598.0 }, "source": "https://github.com/thorfdbg/libjpeg/commit/ea6315164b1649ff932a396b7600eac4bffcfaba", "signature_version": "v1", "deprecated": false } ] }