CVE-2022-35000

JPEGDEC commit be4843c was discovered to contain a segmentation fault via fseek at /libio/fseek.c...

CVE-2022-35000

CVE-2022-35000 concerns JPEGDEC, a JPEG decoder. A segmentation fault via fseek in /libio/fseek.c (commit be4843c) is described as the vulnerability. Affected software: JPEGDEC. Root cause: segmentation fault triggered by fseek. Impact: availability disruption (CVSS v3.1 indicates MEDIUM base imp...

CVE-2022-34999

JPEGDEC commit be4843c was discovered to contain a FPE via DecodeJPEG at /src/jpeg.inl...

CVE-2022-34999

JPEGDEC commit be4843c was discovered to contain a FPE via DecodeJPEG at /src/jpeg.inl...

CVE-2022-34999

JPEGDEC commit be4843c was discovered to contain a FPE via DecodeJPEG at /src/jpeg.inl...

CVE-2022-34999

CVE-2022-34999 concerns JPEGDEC (JPEG decoder, Arduino focus) with a vulnerability in the DecodeJPEG path (/src/jpeg.inl) due to a floating point exception (FPE) introduced by commit be4843c. The issue is described as a local fault that can impact availability (CVSSv3.1: AV:L/AC:L/PR:N/UI:R/S:U/C...

CVE-2022-34998

JPEGDEC commit be4843c was discovered to contain a global buffer overflow via JPEGDecodeMCU at /src/jpeg.inl...

CVE-2022-34998

JPEGDEC commit be4843c was discovered to contain a global buffer overflow via JPEGDecodeMCU at /src/jpeg.inl...

CVE-2022-34998

JPEGDEC commit be4843c was discovered to contain a global buffer overflow via JPEGDecodeMCU at /src/jpeg.inl...

CVE-2022-34998

CVE-2022-34998 concerns JPEGDEC, a JPEG decoder. The connected records specify a global buffer overflow in the JPEGDecodeMCU path inside /src/jpeg.inl, caused by commit be4843c. This issue applies to JPEGDEC’s decoding component and is described with a HIGH impact context (CVSS 3.1 metrics indica...

CVE-2022-34998: Buffer Copy without Checking Size of Input

JPEGDEC commit be4843c was discovered to contain a global buffer overflow via JPEGDecodeMCU at /src/jpeg.inl...

CVE-2022-35000: Undefined Security Weakness

JPEGDEC commit be4843c was discovered to contain a segmentation fault via fseek at /libio/fseek.c...

PT-2022-22482

Name of the Vulnerable Software and Affected Versions JPEGDEC affected versions not specified Description A global buffer overflow issue was discovered in JPEGDEC via the ucDitherBuffer at /src/jpeg.inl. Recommendations At the moment, there is no information about a newer version that contains a...

PT-2022-22479

Name of the Vulnerable Software and Affected Versions JPEGDEC affected versions not specified Description A floating-point exception FPE issue was discovered in JPEGDEC, specifically in the DecodeJPEG function located at /src/jpeg.inl. This issue affects the JPEGDEC commit be4843c. Recommendation...

CVE-2022-34999: Incorrect Comparison

JPEGDEC commit be4843c was discovered to contain a FPE via DecodeJPEG at /src/jpeg.inl...

PT-2022-22478

Name of the Vulnerable Software and Affected Versions JPEGDEC affected versions not specified Description A global buffer overflow issue was discovered in JPEGDEC via the JPEGDecodeMCU function at /src/jpeg.inl. This issue can be exploited at the /src/jpeg.inl endpoint. Recommendations At the...

CVE-2022-35003: Buffer Copy without Checking Size of Input

JPEGDEC commit be4843c was discovered to contain a global buffer overflow via ucDitherBuffer at /src/jpeg.inl...

PT-2022-22481

Name of the Vulnerable Software and Affected Versions JPEGDEC affected versions not specified Description A segmentation fault was discovered in JPEGDEC via TIFFSHORT at /src/jpeg.inl, which can be exploited to cause a crash. Recommendations At the moment, there is no information about a newer...

CVE-2022-35004: Undefined Security Weakness

JPEGDEC commit be4843c was discovered to contain a FPE via TIFFSHORT at /src/jpeg.inl...

JPEGDEC security vulnerability

JPEGDEC is a JPEG decoder optimized for Arduino by the individual developer Larry Bank. A security vulnerability exists in JPEGDEC that stems from a segmentation error in the fseek module of the /src/jpeg.inl file...