CVE-2022-31796: 
NixOS vulnerability analysis and mitigation

libjpeg 1.63 contains a heap-based buffer over-read vulnerability (CVE-2022-31796) in the HierarchicalBitmapRequester::FetchRegion function within hierarchicalbitmaprequester.cpp. The vulnerability occurs because the MCU (Minimum Coded Unit) size can be different between allocation and use (Debian Security).

The vulnerability exists in the HierarchicalBitmapRequester::FetchRegion function where inconsistent MCU sizes across hierarchical levels can lead to a heap buffer overflow. The issue manifests when processing JPEG images where the MCU size differs between allocation and actual usage. This was confirmed through testing with Address Sanitizer which revealed a heap-buffer-overflow during memory operations (GitHub Issue).

When exploited, this vulnerability can lead to a heap buffer overflow condition, potentially resulting in program crashes or denial of service. The vulnerability affects systems running libjpeg version 1.63 (CVE Mitre).

The issue has been fixed in newer versions of libjpeg. The fix includes adding checks for consistency of MCU sizes across hierarchical levels, causing the program to fail if they differ. The patch was implemented in commit 187035b (GitHub Commit).