CVE-2020-15470

ffjpeg through 2020-02-24 has a heap-based buffer overflow in jfifdecode in jfif.c...

ffjpeg buffer overflow vulnerability (CNVD-2020-31582)

ffjpeg is a JPEG encoder/decoder. A security vulnerability exists in the bmpload of the bmp.c file in ffjpeg version 2020-02-24 and earlier. An attacker could exploit this vulnerability to cause a denial of service...

ffjpeg buffer overflow vulnerability (CNVD-2020-31581)

ffjpeg is a JPEG encoder/decoder. A buffer overflow vulnerability exists in the jfifdecode of the jfif.c file in ffjpeg versions 2020-02-24 and earlier. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resultin...

ffjpeg buffer overflow vulnerability (CNVD-2020-31580)

ffjpeg is a JPEG encoder/decoder. A security vulnerability exists in the jfifencode of the jfif.c file in ffjpeg version 2020-02-24 and earlier. An attacker can exploit this vulnerability to cause a denial of service...

CVE-2020-13439

ffjpeg through 2020-02-24 has a heap-based buffer over-read in jfifdecode in jfif.c...

CVE-2020-13440

ffjpeg through 2020-02-24 has an invalid write in bmpload in bmp.c...

CVE-2020-13440

ffjpeg through 2020-02-24 has an invalid write in bmpload in bmp.c...

CVE-2020-13438

ffjpeg through 2020-02-24 has an invalid read in jfifencode in jfif.c...

CVE-2020-13438

ffjpeg through 2020-02-24 has an invalid read in jfifencode in jfif.c...

CVE-2020-13439

ffjpeg through 2020-02-24 has a heap-based buffer over-read in jfifdecode in jfif.c...

Code injection

ffjpeg through 2020-02-24 has an invalid read in jfifencode in jfif.c...

Design/Logic Flaw

ffjpeg through 2020-02-24 has an invalid write in bmpload in bmp.c...

Heap overflow

ffjpeg through 2020-02-24 has a heap-based buffer over-read in jfifdecode in jfif.c...

CVE-2020-13438

Summary: FFJPEG’s jfif_encode in jfif.c (ffjpeg up to 2020-02-24) is affected by an invalid read (CVE-2020-13438) that can crash or corrupt memory. Related Red Hat entries describe a null pointer dereference in bmp_load() that occurs after the CVE-2020-13438 patch, indicating an incomplete patch ...

CVE-2020-13438

ffjpeg through 2020-02-24 has an invalid read in jfifencode in jfif.c...

CVE-2020-13440

ffjpeg through 2020-02-24 has an invalid write in bmpload in bmp.c...

CVE-2020-13440

The CVE concerns ffjpeg up to version 2020-02-24, with an invalid write in bmp_load (bmp.c). Affected component is the ffjpeg BMP loader; root cause is a write past allocated memory in bmp_load. Documented impact indicates potential denial of service (CNVD/NVD metrics show Availability impact; CV...

CVE-2020-13439

ffjpeg through 2020-02-24 has a heap-based buffer over-read in jfifdecode in jfif.c...

CVE-2020-13439

CVE-2020-13439 describes a heap-based buffer over-read in the jfif_decode function of ffjpeg’s jfif.c, affecting ffjpeg up to and including 2020-02-24. Public sources consistently identify the vulnerability as a memory-read/write boundary issue in the JPEG decoding path, with impact characterized...

PT-2020-13542 · FFmpeg · Ffjpeg

Name of the Vulnerable Software and Affected Versions: ffjpeg versions prior to 2020-02-24 Description: The issue is related to an invalid write in the bmp load function located in bmp.c. Recommendations: For versions prior to 2020-02-24, at the moment, there is no information about a newer versi...