CVE-2020-23705

A global buffer overflow vulnerability in jfifencode at jfif.c:701 of ffjpeg through 2020-06-22 allows attackers to cause a Denial of Service DOS via a crafted jpeg file...

ffjpeg 安全漏洞

ffjpeg is a simple implementation of jpeg encoding and decoding. ffjpeg 2020-06-22 and earlier versions of jfif.c:701 have a global buffer overflow vulnerability in jfifencode. An attacker could exploit the vulnerability to cause a denial of service via a specially crafted jpeg file...

PT-2021-7739 · Ffjpeg · Ffjpeg

Name of the Vulnerable Software and Affected Versions: ffjpeg versions through 2020-06-22 Description: A global buffer overflow vulnerability in the jfif encode function at jfif.c:701 of the ffjpeg library allows attackers to cause a Denial of Service DOS via a crafted jpeg file. The vulnerabilit...

PT-2021-10952 · Ffjpeg · Ffjpeg

Name of the Vulnerable Software and Affected Versions: ffjpeg versions prior to 2020-07-02 Description: A stack-based buffer overflow issue exists in the jfif decodevoid ctxt, BMP pb function, which could cause a denial of service by submitting a malicious jpeg image. The issue is related to the...

PT-2021-7750 · Ffjpeg · Ffjpeg

Name of the Vulnerable Software and Affected Versions: ffjpeg versions through 2020-07-02 Description: A heap-based buffer overflow issue exists in the jfif decode function at ffjpeg/src/jfif.c line 544 and line 545, which could cause a denial of service by submitting a malicious jpeg image. This...

[SECURITY] Fedora 33 Update: perl-Image-ExifTool-12.16-3.fc33

ExifTool is a Perl module with an included command-line application for reading and writing meta information in image, audio, and video files. It reads EXIF, GPS, IPTC, XMP, JFIF, MakerNotes, GeoTIFF, ICC Profile, Photoshop IRB, FlashPix, AFCP, and ID3 meta information from JPG, JP2, TIFF, GIF,...

Fedora: Security Advisory for perl-Image-ExifTool (FEDORA-2021-e3d8833d36)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2020-15470

ffjpeg through 2020-02-24 has a heap-based buffer overflow in jfifdecode in jfif.c...

PT-2020-14437 · FFmpeg · Ffjpeg

Name of the Vulnerable Software and Affected Versions: ffjpeg versions prior to 2020-02-24 Description: The issue is a heap-based buffer overflow in the jfif decode function located in jfif.c. Recommendations: For versions prior to 2020-02-24, update to a version released after 2020-02-24 to...

ffjpeg buffer overflow vulnerability (CNVD-2020-31581)

ffjpeg is a JPEG encoder/decoder. A buffer overflow vulnerability exists in the jfifdecode of the jfif.c file in ffjpeg versions 2020-02-24 and earlier. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resultin...

ffjpeg buffer overflow vulnerability (CNVD-2020-31580)

ffjpeg is a JPEG encoder/decoder. A security vulnerability exists in the jfifencode of the jfif.c file in ffjpeg version 2020-02-24 and earlier. An attacker can exploit this vulnerability to cause a denial of service...

CVE-2020-13439

ffjpeg through 2020-02-24 has a heap-based buffer over-read in jfifdecode in jfif.c...

CVE-2020-13438

ffjpeg through 2020-02-24 has an invalid read in jfifencode in jfif.c...

PT-2020-13541 · FFmpeg · Ffjpeg

Name of the Vulnerable Software and Affected Versions: ffjpeg versions prior to 2020-02-24 Description: The issue is related to a heap-based buffer over-read in the jfif decode function located in jfif.c. This indicates a problem with how the software handles certain data, potentially leading to...

PT-2020-13540 · FFmpeg · Ffjpeg

Name of the Vulnerable Software and Affected Versions: ffjpeg versions prior to 2020-02-24 Description: The issue is related to an invalid read in the jfif encode function located in jfif.c. Recommendations: For versions prior to 2020-02-24, at the moment, there is no information about a newer...

PT-2019-15987 · FFmpeg · Ffjpeg

Name of the Vulnerable Software and Affected Versions: ffjpeg through 2019-08-21 Description: The issue is related to a NULL pointer dereference in the bitstr tell function at bitstr.c, specifically concerning jfif encode. Recommendations: For versions through 2019-08-21, at the moment, there is ...

ffjpeg Buffer Overflow Vulnerability

ffjpeg is a simple jpeg encoding and decoding implementation. ffjpeg A buffer overflow vulnerability exists in jfifload in jfif.c in versions prior to 2019-08-21, which can be exploited by an attacker to cause a buffer overflow or heap overflow, among other things...

CVE-2019-16352

ffjpeg before 2019-08-21 has a heap-based buffer overflow in jfifload at jfif.c...

PT-2019-14642 · FFmpeg · Ffjpeg

Name of the Vulnerable Software and Affected Versions: ffjpeg versions prior to 2019-08-21 Description: The issue is a heap-based buffer overflow in the jfif load function at jfif.c. Recommendations: For versions prior to 2019-08-21, update to a version released after 2019-08-21 to resolve the...

CVE-2017-1000414

ImpulseAdventure JPEGsnoop version 1.7.5 is vulnerable to a division by zero in the JFIF decode handling resulting denial of service...