CVE-2020-13438

ffjpeg through 2020-02-24 has an invalid read in jfifencode in jfif.c...

Null pointer dereference

A Null Pointer Dereference vulnerability exits in ffjpeg d5cfd49 2021-12-06 in bmpload. When the size information in metadata of the bmp is out of range, it returns without assign memory buffer to pb-pdata and did not exit the program. So the program crashes when it tries to access the pb-data, i...

CVE-2020-13438

Summary: FFJPEG’s jfif_encode in jfif.c (ffjpeg up to 2020-02-24) is affected by an invalid read (CVE-2020-13438) that can crash or corrupt memory. Related Red Hat entries describe a null pointer dereference in bmp_load() that occurs after the CVE-2020-13438 patch, indicating an incomplete patch ...