CVE-2022-28471

In ffjpeg commit hash: caade60, the function bmpload in bmp.c contains an integer overflow vulnerability, which eventually results in the heap overflow in jfifencode in jfif.c. This is due to the incomplete patch for issue 38...

CVE-2021-45385

A Null Pointer Dereference vulnerability exits in ffjpeg d5cfd49 2021-12-06 in bmpload. When the size information in metadata of the bmp is out of range, it returns without assign memory buffer to pb-pdata and did not exit the program. So the program crashes when it tries to access the pb-data, i...

CVE-2021-45385

A Null Pointer Dereference vulnerability exits in ffjpeg d5cfd49 2021-12-06 in bmpload. When the size information in metadata of the bmp is out of range, it returns without assign memory buffer to pb-pdata and did not exit the program. So the program crashes when it tries to access the pb-data, i...

ffjpeg buffer overflow vulnerability (CNVD-2020-31582)

ffjpeg is a JPEG encoder/decoder. A security vulnerability exists in the bmpload of the bmp.c file in ffjpeg version 2020-02-24 and earlier. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2020-13440

ffjpeg through 2020-02-24 has an invalid write in bmpload in bmp.c...

SDL: heap-based buffer overflow in SDL blit functions in video/SDL_blit*.c

A heap-based buffer overflow was discovered in SDL in the SDLBlitCopy function, that was called while copying an existing surface into a new optimized one, due to lack of validation while loading a BMP image in the SDLLoadBMPRW function. An application that uses SDL to parse untrusted input files...

UBUNTU-CVE-2018-13794

A heap-based buffer overflow exists in stbibmploadcont in stbimage.h in catimg 2.4.0...

PT-2018-12190

Name of the Vulnerable Software and Affected Versions catimg version 2.4.0 Description A heap-based buffer overflow issue exists in the stbi bmp load cont function within stb image.h. Recommendations For catimg version 2.4.0, consider updating to a newer version that addresses this issue, if...

Unspecified vulnerability in jpeg-compressor

jpeg-compressor is an encoder for generating JPEG format files. A security vulnerability exists in the 'bmpload' function of the stbimage.c file in jpeg-compressor version 0.1. A remote attacker can exploit this vulnerability to cause a denial of service heap buffer overflow and application crash...

PT-2018-11551

Name of the Vulnerable Software and Affected Versions jpeg-compressor version 0.1 Description An issue in the bmp load function in stb image.c allows remote attackers to cause a denial of service, resulting in a heap-based buffer overflow and application crash, or possibly have other unspecified...