Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:35952
HistoryJun 13, 2022 - 5:01 a.m.

Denial Of Service (DoS)

2022-06-1305:01:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12

0.002 Low

EPSS

Percentile

62.3%

jpeg-js is vulnerable to denial of service. The vulnerability exists in prepareComponents function in decoder.js because the sampling factors are not properly validated which creates an infinite loop due to some user input causing an application crash.

CPENameOperatorVersion
jpeg-jsle0.4.3
jpeg-jsle0.4.3

0.002 Low

EPSS

Percentile

62.3%