CVE-2022-22539

When a user opens a manipulated JPEG file format .jpg, 2d.x3d received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE...

Format string

When a user opens a manipulated JPEG file format .jpg, 2d.x3d received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE...

CVE-2022-22539

When a user opens a manipulated JPEG file format .jpg, 2d.x3d received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE...

CVE-2022-22539

SAP 3D Visual Enterprise Viewer 9.0 is affected by CVE-2022-22539 via crafted JPEG parsing. The published ZDI advisory describes an out-of-bounds write in JPG parsing that can allow remote code execution when a user opens a manipulated JPEG (requires user interaction). In the SAP NVD entry, the i...

CVE-2022-22539

When a user opens a manipulated JPEG file format .jpg, 2d.x3d received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE...

PT-2022-15508 · Sap · Sap 3D Visual Enterprise Viewer

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Viewer version 9.0 Description: The issue occurs when a user opens a manipulated JPEG file format received from untrusted sources, causing the application to crash and become temporarily unavailable until restart...

CVE-2021-44956

Two Heap based buffer overflow vulnerabilities exist in ffjpeg through 01.01.2021. It is similar to CVE-2020-23852. Issues that are in the jfifdecode function at ffjpeg/src/jfif.c line 552 could cause a Denial of Service by using a crafted jpeg file...

CVE-2021-44956

Two Heap based buffer overflow vulnerabilities exist in ffjpeg through 01.01.2021. It is similar to CVE-2020-23852. Issues that are in the jfifdecode function at ffjpeg/src/jfif.c line 552 could cause a Denial of Service by using a crafted jpeg file...

CVE-2021-44957

Global buffer overflow vulnerability exist in ffjpeg through 01.01.2021. It is similar to CVE-2020-23705. Issue is in the jfifencode function at ffjpeg/src/jfif.c line 708 could cause a Denial of Service by using a crafted jpeg file...

CVE-2021-44957

Global buffer overflow vulnerability exist in ffjpeg through 01.01.2021. It is similar to CVE-2020-23705. Issue is in the jfifencode function at ffjpeg/src/jfif.c line 708 could cause a Denial of Service by using a crafted jpeg file...

CVE-2021-44956

Two Heap based buffer overflow vulnerabilities exist in ffjpeg through 01.01.2021. It is similar to CVE-2020-23852. Issues that are in the jfifdecode function at ffjpeg/src/jfif.c line 552 could cause a Denial of Service by using a crafted jpeg file...

Buffer overflow

Global buffer overflow vulnerability exist in ffjpeg through 01.01.2021. It is similar to CVE-2020-23705. Issue is in the jfifencode function at ffjpeg/src/jfif.c line 708 could cause a Denial of Service by using a crafted jpeg file...

CVE-2021-44956

CVE-2021-44956 affects ffjpeg, describing two heap-based buffer overflows in the jfif_decode function (ffjpeg/src/jfif.c, around line 552) that could cause a Denial of Service when processing crafted JPEG files. The entry references versions up to 01.01.2021 and notes similarity to CVE-2020-23852...

CVE-2021-44956

Two Heap based buffer overflow vulnerabilities exist in ffjpeg through 01.01.2021. It is similar to CVE-2020-23852. Issues that are in the jfifdecode function at ffjpeg/src/jfif.c line 552 could cause a Denial of Service by using a crafted jpeg file...

CVE-2021-44957

CVE-2021-44957 is a global buffer overflow vulnerability in the ffjpeg JPEG encoder/decoder. The issue is located in the jfif_encode function in ffjpeg/src/jfif.c (lines around 701–708) and can be triggered by processing a crafted JPEG file, potentially causing a Denial of Service. The CVE descri...

ffjpeg 缓冲区错误漏洞

ffjpeg is a JPEG encoder/decoder. A buffer overflow vulnerability exists in ffjpeg, which stems from the jfifencode function in the product/src/jfif.c file failing to properly handle memory boundaries, and can be exploited by attackers to cause a denial of service via special jpeg files...

ffjpeg 缓冲区错误漏洞

ffjpeg is a JPEG encoder/decoder. ffjpeg suffers from a buffer overflow vulnerability that stems from a failure of the jfifdecode function in the product/src/jfif.c file to properly handle memory boundaries, which could be exploited by an attacker to cause a denial of service via a special jpeg...

PT-2022-6565 · Ffjpeg · Ffjpeg

Name of the Vulnerable Software and Affected Versions: ffjpeg versions prior to 01.01.2021 Description: The issue is related to a heap-based buffer overflow in the jfif decode function at ffjpeg/src/jfif.c, which could cause a Denial of Service by using a crafted jpeg file. This can be exploited ...

CVE-2020-26208

JHEAD is a simple command line tool for displaying and some manipulation of EXIF header data embedded in Jpeg images from digital cameras. In affected versions there is a heap-buffer-overflow on jhead-3.04/jpgfile.c:285 ReadJpegSections. Crafted jpeg images can be provided to the user resulting i...

CVE-2020-26208

JHEAD is a simple command line tool for displaying and some manipulation of EXIF header data embedded in Jpeg images from digital cameras. In affected versions there is a heap-buffer-overflow on jhead-3.04/jpgfile.c:285 ReadJpegSections. Crafted jpeg images can be provided to the user resulting i...