Lucene search

MitreCVE-2020-24222

HistoryAug 11, 2023 - 2:15 p.m.

CVE-2020-24222

2023-08-1114:15:10

CWE-120

mitre

web.nvd.nist.gov

cve-2020-24222

buffer overflow

rockcarry ffjpeg

arbitrary code execution

align issue

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

5.1%

JSON

Buffer Overflow vulnerability in jfif_decode() function in rockcarry ffjpeg through version 1.0.0, allows local attackers to execute arbitrary code due to an issue with ALIGN.

Affected configurations

Nvd

Node

rockcarryffjpegRange≤1.0.0

VendorProductVersionCPE
rockcarryffjpeg*cpe:2.3:a:rockcarry:ffjpeg:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
rockcarry	ffjpeg	*	cpe:2.3:a:rockcarry:ffjpeg::::::::

References

github.com/rockcarry/ffjpeg/issues/31

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

5.1%

JSON

Related for CVE-2020-24222