CVE-2022-28471: Integer Overflow or Wraparound

In ffjpeg commit hash: caade60, the function bmpload in bmp.c contains an integer overflow vulnerability, which eventually results in the heap overflow in jfifencode in jfif.c. This is due to the incomplete patch for issue 38...

ffjpeg 输入验证错误漏洞

ffjpeg is a JPEG encoder/decoder by the Chinese individual developer Kai Chen. A security vulnerability exists in ffjpeg, which originates from an integer overflow vulnerability in the function bmpload in bmp.c, which ultimately leads to a heap overflow in jfifencode in jfif.c. The vulnerability ...

ffjpeg null pointer dereference vulnerability (CNVD-2022-19849)

ffjpeg is a JPEG encoder/decoder. ffjpeg suffers from a null pointer dereference vulnerability, for which no detailed vulnerability details are currently available...

CVE-2021-34122

The function bitstrtell at bitstr.c in ffjpeg commit 4ab404e has a NULL pointer dereference...

CVE-2021-34122

The function bitstrtell at bitstr.c in ffjpeg commit 4ab404e has a NULL pointer dereference...

Null pointer dereference

The function bitstrtell at bitstr.c in ffjpeg commit 4ab404e has a NULL pointer dereference...

CVE-2021-34122

CVE-2021-34122 affects the ffjpeg library (JPEG encoder/decoder). The root cause is a NULL pointer dereference in the function bitstr_tell implemented in bitstr.c, tied to commit 4ab404e. Public sources consistently describe a NULL pointer dereference as the vulnerability mechanism; CVSS metrics ...

CVE-2021-34122

The function bitstrtell at bitstr.c in ffjpeg commit 4ab404e has a NULL pointer dereference...

PT-2022-10323 · Ffjpeg · Ffjpeg

Name of the Vulnerable Software and Affected Versions: ffjpeg affected versions not specified Description: The issue is related to a NULL pointer dereference in the bitstr tell function at bitstr.c in ffjpeg commit 4ab404e. Recommendations: At the moment, there is no information about a newer...

CVE-2021-34122: NULL Pointer Dereference

The function bitstrtell at bitstr.c in ffjpeg commit 4ab404e has a NULL pointer dereference...

ffjpeg Denial of Service Vulnerability (CNVD-2022-12798)

ffjpeg is a JPEG encoder/decoder by the individual developer Kai Chen in China. A rejection vulnerability exists in ffjpeg, which originates when the size information in the metadata of a bmp is out of range, it returns without allocating a memory buffer to pb-pdata and without exiting the progra...

CVE-2021-45385

A Null Pointer Dereference vulnerability exits in ffjpeg d5cfd49 2021-12-06 in bmpload. When the size information in metadata of the bmp is out of range, it returns without assign memory buffer to pb-pdata and did not exit the program. So the program crashes when it tries to access the pb-data, i...

CVE-2021-45385

A Null Pointer Dereference vulnerability exits in ffjpeg d5cfd49 2021-12-06 in bmpload. When the size information in metadata of the bmp is out of range, it returns without assign memory buffer to pb-pdata and did not exit the program. So the program crashes when it tries to access the pb-data, i...

CVE-2021-45385

A Null Pointer Dereference vulnerability exits in ffjpeg d5cfd49 2021-12-06 in bmpload. When the size information in metadata of the bmp is out of range, it returns without assign memory buffer to pb-pdata and did not exit the program. So the program crashes when it tries to access the pb-data, i...

Null pointer dereference

A Null Pointer Dereference vulnerability exits in ffjpeg d5cfd49 2021-12-06 in bmpload. When the size information in metadata of the bmp is out of range, it returns without assign memory buffer to pb-pdata and did not exit the program. So the program crashes when it tries to access the pb-data, i...

CVE-2021-45385

Summary (CVE-2021-45385 – ffjpeg) A Null Pointer Dereference affects ffjpeg (revision d5cfd49, 2021-12-06) in bmp_load(). When BMP metadata size is out of range, the code may skip allocating memory to pb->pdata and continue execution, causing a crash when jfif_encode() accesses pb->data (jf...

CVE-2021-45385

A Null Pointer Dereference vulnerability exits in ffjpeg d5cfd49 2021-12-06 in bmpload. When the size information in metadata of the bmp is out of range, it returns without assign memory buffer to pb-pdata and did not exit the program. So the program crashes when it tries to access the pb-data, i...

PT-2022-12335 · Ffjpeg · Ffjpeg

Name of the Vulnerable Software and Affected Versions: ffjpeg version d5cfd49 2021-12-06 Description: A Null Pointer Dereference issue exists due to incomplete patching. When size information in the metadata of a bmp file is out of range, the program fails to assign a memory buffer to pb-pdata bu...

CVE-2021-45385: NULL Pointer Dereference

A Null Pointer Dereference vulnerability exits in ffjpeg d5cfd49 2021-12-06 in bmpload. When the size information in metadata of the bmp is out of range, it returns without assign memory buffer to pb-pdata and did not exit the program. So the program crashes when it tries to access the pb-data, i...

ffjpeg buffer overflow vulnerability (CNVD-2022-19850)

ffjpeg is a JPEG encoder/decoder. ffjpeg suffers from a buffer overflow vulnerability that stems from a failure of the jfifdecode function in the product/src/jfif.c file to properly handle memory boundaries, which could be exploited by an attacker to cause a denial of service via a special jpeg...