Browse CVEs

HIGH 7.8 CVE-2020-24222 Buffer Overflow vulnerability in jfif_decode() function in rockcarry ffjpeg through version 1.0.0, allows local attackers to execute arbitrary code d… Ffjpeg after 1.0.0 Fix from $1,9502023-08-11 MEDIUM 6.5 CVE-2022-28471 In ffjpeg (commit hash: caade60), the function bmp_load() in bmp.c contains an integer overflow vulnerability, which eventually results in the heap o… Ffjpeg No fix yet Fix from $1,6002022-05-05 MEDIUM 5.5 CVE-2021-34122 The function bitstr_tell at bitstr.c in ffjpeg commit 4ab404e has a NULL pointer dereference. Ffjpeg 2021-03-16+ Fix from $1,6002022-03-10 MEDIUM 6.5 CVE-2021-45385 A Null Pointer Dereference vulnerability exits in ffjpeg d5cfd49 (2021-12-06) in bmp_load(). When the size information in metadata of the bmp is out … Ffjpeg Patch available Fix from $1,6002022-02-11 MEDIUM 6.5 CVE-2021-44956 Two Heap based buffer overflow vulnerabilities exist in ffjpeg through 01.01.2021. It is similar to CVE-2020-23852. Issues that are in the jfif_decod… Ffjpeg after 2021-01-01 Fix from $1,6002022-02-08 MEDIUM 6.5 CVE-2021-44957 Global buffer overflow vulnerability exist in ffjpeg through 01.01.2021. It is similar to CVE-2020-23705. Issue is in the jfif_encode function at ffj… Ffjpeg after 2021-01-01 Fix from $1,6002022-02-08 MEDIUM 6.5 CVE-2020-23705 A global buffer overflow vulnerability in jfif_encode at jfif.c:701 of ffjpeg through 2020-06-22 allows attackers to cause a Denial of Service (DOS) … Ffjpeg after 2020-06-22 Fix from $1,6002021-07-15 MEDIUM 5.5 CVE-2020-23851 A stack-based buffer overflow vulnerability exists in ffjpeg through 2020-07-02 in the jfif_decode(void *ctxt, BMP *pb) function at ffjpeg/src/jfif.c… Ffjpeg after 2020-07-02 Fix from $1,6002021-05-18 MEDIUM 5.5 CVE-2020-23852 A heap based buffer overflow vulnerability exists in ffjpeg through 2020-07-02 in the jfif_decode(void *ctxt, BMP *pb) function at ffjpeg/src/jfif.c … Ffjpeg after 2020-07-02 Fix from $1,6002021-05-18 MEDIUM 5.5 CVE-2020-15470 ffjpeg through 2020-02-24 has a heap-based buffer overflow in jfif_decode in jfif.c. Ffjpeg after 2020-02-24 Fix from $1,6002020-07-01 MEDIUM 6.5 CVE-2020-13438 ffjpeg through 2020-02-24 has an invalid read in jfif_encode in jfif.c. Ffjpeg after 2020-02-24 Fix from $1,6002020-05-24 MEDIUM 6.5 CVE-2020-13439 ffjpeg through 2020-02-24 has a heap-based buffer over-read in jfif_decode in jfif.c. Ffjpeg after 2020-02-24 Fix from $1,6002020-05-24 MEDIUM 6.5 CVE-2020-13440 ffjpeg through 2020-02-24 has an invalid write in bmp_load in bmp.c. Ffjpeg after 2020-02-24 Fix from $1,6002020-05-24 MEDIUM 6.5 CVE-2019-19887 bitstr_tell at bitstr.c in ffjpeg through 2019-08-21 has a NULL pointer dereference related to jfif_encode. Ffjpeg after 2019-08-21 Fix from $1,6002019-12-18 MEDIUM 6.5 CVE-2019-19888 jfif_decode in jfif.c in ffjpeg through 2019-08-21 has a divide-by-zero error. Ffjpeg after 2019-08-21 Fix from $1,6002019-12-18 MEDIUM 6.5 CVE-2019-16350 ffjpeg before 2019-08-18 has a NULL pointer dereference in idct2d8x8() at dct.c. Ffjpeg 2019-08-18+ Fix from $1,6002019-09-16 MEDIUM 6.5 CVE-2019-16351 ffjpeg before 2019-08-18 has a NULL pointer dereference in huffman_decode_step() at huffman.c. Ffjpeg 2019-08-18+ Fix from $1,6002019-09-16 MEDIUM 6.5 CVE-2019-16352 ffjpeg before 2019-08-21 has a heap-based buffer overflow in jfif_load() at jfif.c. Ffjpeg 2019-08-18+ Fix from $1,6002019-09-16 MEDIUM 6.5 CVE-2018-16781 ffjpeg.dll in ffjpeg before 2018-08-22 allows remote attackers to cause a denial of service (FPE signal) via a progressive JPEG file that lacks an AC… Ffjpeg 2018-08-22+ Fix from $1,6002018-09-10