CVE-2019-19887

bitstr_tell at bitstr.c in ffjpeg through 2019-08-21 has a NULL pointer dereference related to jfif_encode.

CVE-2019-16350

ffjpeg before 2019-08-18 has a NULL pointer dereference in idct2d8x8() at dct.c.

CVE-2019-16351

ffjpeg before 2019-08-18 has a NULL pointer dereference in huffman_decode_step() at huffman.c.

CVE-2019-16352

ffjpeg before 2019-08-21 has a heap-based buffer overflow in jfif_load() at jfif.c.

CVE-2019-19888

jfif_decode in jfif.c in ffjpeg through 2019-08-21 has a divide-by-zero error.