EUVD-2021-31754

Malicious code in bioql PyPI...

EUVD-2021-32158

Malicious code in bioql PyPI...

EUVD-2022-32914

Malicious code in bioql PyPI...

CVE-2022-28471

In ffjpeg commit hash: caade60, the function bmpload in bmp.c contains an integer overflow vulnerability, which eventually results in the heap overflow in jfifencode in jfif.c. This is due to the incomplete patch for issue 38...

CVE-2022-35433

ffjpeg commit caade60a69633d74100bd3c2528bddee0b6a1291 was discovered to contain a memory leak via /src/jfif.c...

CVE-2021-45385

A Null Pointer Dereference vulnerability exits in ffjpeg d5cfd49 2021-12-06 in bmpload. When the size information in metadata of the bmp is out of range, it returns without assign memory buffer to pb-pdata and did not exit the program. So the program crashes when it tries to access the pb-data, i...

CVE-2021-34122

The function bitstrtell at bitstr.c in ffjpeg commit 4ab404e has a NULL pointer dereference...

CVE-2020-23705

A global buffer overflow vulnerability in jfifencode at jfif.c:701 of ffjpeg through 2020-06-22 allows attackers to cause a Denial of Service DOS via a crafted jpeg file...

CVE-2020-13440

ffjpeg through 2020-02-24 has an invalid write in bmpload in bmp.c...

CVE-2020-23851

A stack-based buffer overflow vulnerability exists in ffjpeg through 2020-07-02 in the jfifdecodevoid ctxt, BMP pb function at ffjpeg/src/jfif.c:513:28, which could cause a denial of service by submitting a malicious jpeg image...

CVE-2020-13438

ffjpeg through 2020-02-24 has an invalid read in jfifencode in jfif.c...

CVE-2020-23852

A heap based buffer overflow vulnerability exists in ffjpeg through 2020-07-02 in the jfifdecodevoid ctxt, BMP pb function at ffjpeg/src/jfif.c line 544 & line 545, which could cause a denial of service by submitting a malicious jpeg image...

CVE-2020-15470

ffjpeg through 2020-02-24 has a heap-based buffer overflow in jfifdecode in jfif.c...

CVE-2019-19887

bitstrtell at bitstr.c in ffjpeg through 2019-08-21 has a NULL pointer dereference related to jfifencode...

CVE-2019-19888

jfifdecode in jfif.c in ffjpeg through 2019-08-21 has a divide-by-zero error...

CVE-2020-24222

Buffer Overflow vulnerability in jfifdecode function in rockcarry ffjpeg through version 1.0.0, allows local attackers to execute arbitrary code due to an issue with ALIGN...

CVE-2020-24222

Buffer Overflow vulnerability in jfifdecode function in rockcarry ffjpeg through version 1.0.0, allows local attackers to execute arbitrary code due to an issue with ALIGN...

Buffer overflow

Buffer Overflow vulnerability in jfifdecode function in rockcarry ffjpeg through version 1.0.0, allows local attackers to execute arbitrary code due to an issue with ALIGN...

PT-2023-11665 · Rockcarry · Ffjpeg

Name of the Vulnerable Software and Affected Versions: rockcarry ffjpeg versions 1.0.0 and earlier Description: The issue is related to a Buffer Overflow vulnerability in the jfif decode function, which allows local attackers to execute arbitrary code due to an issue with ALIGN. This vulnerabilit...

ffjpeg Security Vulnerabilities

ffjpeg is a JPEG encoder/decoder from the Chinese individual developer Kai Chen. A security vulnerability exists in rockcarry ffjpeg version 1.0.0, which originates from a buffer overflow vulnerability in the function jfifdecode. An attacker can exploit this vulnerability to execute arbitrary cod...