CVE-2021-45385: NULL Pointer Dereference

A Null Pointer Dereference vulnerability exits in ffjpeg d5cfd49 2021-12-06 in bmpload. When the size information in metadata of the bmp is out of range, it returns without assign memory buffer to pb-pdata and did not exit the program. So the program crashes when it tries to access the pb-data, i...

CVE-2020-13438: Out-of-bounds Read

ffjpeg through 2020-02-24 has an invalid read in jfifencode in jfif.c...