Lucene search
+L

485 matches found

OSV
OSV
added 2022/02/08 3:15 p.m.9 views

CVE-2021-44957

Global buffer overflow vulnerability exist in ffjpeg through 01.01.2021. It is similar to CVE-2020-23705. Issue is in the jfifencode function at ffjpeg/src/jfif.c line 708 could cause a Denial of Service by using a crafted jpeg file...

6.5CVSS6.1AI score0.00819EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/02/08 3:15 p.m.10 views

CVE-2021-44957

Global buffer overflow vulnerability exist in ffjpeg through 01.01.2021. It is similar to CVE-2020-23705. Issue is in the jfifencode function at ffjpeg/src/jfif.c line 708 could cause a Denial of Service by using a crafted jpeg file...

6.5CVSS6.9AI score0.00819EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/02/08 3:15 p.m.6 views

CVE-2021-44956

Two Heap based buffer overflow vulnerabilities exist in ffjpeg through 01.01.2021. It is similar to CVE-2020-23852. Issues that are in the jfifdecode function at ffjpeg/src/jfif.c line 552 could cause a Denial of Service by using a crafted jpeg file...

6.5CVSS6.9AI score0.00819EPSS
SaveExploits1References2
Prion
Prion
added 2022/02/08 3:15 p.m.28 views

Buffer overflow

Global buffer overflow vulnerability exist in ffjpeg through 01.01.2021. It is similar to CVE-2020-23705. Issue is in the jfifencode function at ffjpeg/src/jfif.c line 708 could cause a Denial of Service by using a crafted jpeg file...

4.3CVSS6.5AI score0.0101EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2022/02/08 2:13 p.m.39 views

CVE-2021-44956

Two Heap based buffer overflow vulnerabilities exist in ffjpeg through 01.01.2021. It is similar to CVE-2020-23852. Issues that are in the jfifdecode function at ffjpeg/src/jfif.c line 552 could cause a Denial of Service by using a crafted jpeg file...

6.3AI score0.00819EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/02/08 12:00 a.m.10 views

ffjpeg 缓冲区错误漏洞

ffjpeg is a JPEG encoder/decoder. ffjpeg suffers from a buffer overflow vulnerability that stems from a failure of the jfifdecode function in the product/src/jfif.c file to properly handle memory boundaries, which could be exploited by an attacker to cause a denial of service via a special jpeg...

6.5CVSS6AI score0.00819EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/02/08 12:00 a.m.10 views

PT-2022-6565 · Ffjpeg · Ffjpeg

Name of the Vulnerable Software and Affected Versions: ffjpeg versions prior to 01.01.2021 Description: The issue is related to a heap-based buffer overflow in the jfif decode function at ffjpeg/src/jfif.c, which could cause a Denial of Service by using a crafted jpeg file. This can be exploited ...

7.8CVSS6.5AI score0.00819EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2022/01/26 12:00 a.m.10 views

The vulnerability of the cloud-based video conversion, annotation, and format conversion application for Adobe Prelude lies in the reading of data beyond the buffer in memory. This allows attackers to exploit their privileges and gain unauthorized access to protected information.

The vulnerability of the cloud-based video conversion, annotation, and format conversion application for Adobe Prelude involves reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain unauthorized access to protected...

4.3CVSS5.7AI score0.00275EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2021/12/10 10:19 p.m.12 views

MGASA-2021-0549 Updated curaengine packages fix security vulnerability

Buffer overflow vulnerability in function stbiextendreceive in stbimage.h in stb 2.26 via a crafted JPEG file. CVE-2021-28021 An issue was discovered in stb stbimage.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. An...

7.8CVSS6.4AI score0.01463EPSS
SaveExploits2References3
CNNVD
CNNVD
added 2021/12/02 12:00 a.m.10 views

Z-BlogPHP 代码问题漏洞

Z-BlogPHP is an open source PHP-based blogging system from the Z-blog community.Z-BlogPHP is vulnerable to arbitrary file uploads, which can be exploited by attackers to execute arbitrary code via carefully crafted JPG files...

7.8CVSS6.1AI score0.00835EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2021/11/09 6:14 p.m.13 views

exiv2: Heap-based buffer overflow in Jp2Image::readMetadata()

A flaw was found in Exiv2. Improper input validation of the rawData.size property in the Jp2Image::readMetadata function in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data. The highest threat from this vulnerability is to confidentialit...

6.5CVSS6AI score0.02295EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:00 a.m.6 views

The vulnerability of the libjpeg-turbo image processing library allows attackers to compromise the accessibility of protected information.

The vulnerability of the libjpeg-turbo image processing library is related to insufficient handling of input data. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of protected information by consuming excessive memory through a specially crafted JPEG file...

4.3CVSS5.5AI score
SaveExploits0References3
OSV
OSV
added 2021/10/22 8:15 p.m.8 views

CVE-2020-36485

Portable Ltd Playable v9.18 was discovered to contain an arbitrary file upload vulnerability in the filename parameter of the upload module. This vulnerability allows attackers to execute arbitrary code via a crafted JPEG file...

7.8CVSS6.1AI score0.00468EPSS
SaveExploits1References1
OSV
OSV
added 2021/10/15 4:15 p.m.4 views

DEBIAN-CVE-2021-28021

Buffer overflow vulnerability in function stbiextendreceive in stbimage.h in stb 2.26 via a crafted JPEG file...

7.8CVSS7.4AI score0.0143EPSS
SaveExploits1References1
Prion
Prion
added 2021/10/15 4:15 p.m.23 views

Buffer overflow

Buffer overflow vulnerability in function stbiextendreceive in stbimage.h in stb 2.26 via a crafted JPEG file...

6.8CVSS7.4AI score0.0143EPSS
SaveExploits1References8Affected Software3
CNNVD
CNNVD
added 2021/10/15 12:00 a.m.27 views

stb 缓冲区错误漏洞

stb is a single-file public domain library for C/C ++. A buffer error vulnerability exists in stb version 2.26, which stems from a buffer overflow vulnerability in the stbiextendreceive function of the stbimage.h file in the software . An attacker can trigger the vulnerability via a crafted JPEG...

7.8CVSS7.5AI score0.0143EPSS
SaveExploits1References11
Tenable Nessus
Tenable Nessus
added 2021/08/29 12:00 a.m.22 views

Debian DLA-2749-1 : gthumb - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2749 advisory. An issue has been found in gthumb, an image viewer and browser. A heap-based buffer overflow in cairoimagesurfacecreatefromjpeg in...

7.8CVSS7.9AI score0.02149EPSS
SaveExploits2References5
NVD
NVD
added 2021/07/15 10:15 p.m.19 views

CVE-2020-23707

A heap-based buffer overflow vulnerability in the function okjpgdecodeblockprogressive at okjpg.c:1054 of ok-file-formats through 2020-06-26 allows attackers to cause a Denial of Service DOS via a crafted jpeg file...

6.5CVSS0.01098EPSS
SaveExploits1References2
OSV
OSV
added 2021/07/15 10:15 p.m.10 views

CVE-2020-23705

A global buffer overflow vulnerability in jfifencode at jfif.c:701 of ffjpeg through 2020-06-22 allows attackers to cause a Denial of Service DOS via a crafted jpeg file...

6.5CVSS6.1AI score0.0101EPSS
SaveExploits1References1
NVD
NVD
added 2021/07/15 10:15 p.m.17 views

CVE-2020-23706

A heap-based buffer overflow vulnerability in the function okjpgdecodeblocksubsequentscan okjpg.c:1102 of ok-file-formats through 2020-06-26 allows attackers to cause a Denial of Service DOS via a crafted jpeg file...

6.5CVSS0.0101EPSS
SaveExploits1References1
Rows per page
Query Builder