Priority HIGH 69
Buffer Overflow vulnerability in jfif_decode() function in rockcarry ffjpeg through version 1.0.0, allows local attackers to execute arbitrary code due to an issue with ALIGN.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00327 · Published 2023-08-11 · No fix listed CWE-120
Priority LOW 32
ffjpeg before 2019-08-18 has a NULL pointer dereference in huffman_decode_step() at huffman.c.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01334 · Published 2019-09-16 · No fix listed CWE-476
Priority LOW 32
ffjpeg before 2019-08-18 has a NULL pointer dereference in idct2d8x8() at dct.c.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01334 · Published 2019-09-16 · No fix listed CWE-476
Priority LOW 32
ffjpeg.dll in ffjpeg before 2018-08-22 allows remote attackers to cause a denial of service (FPE signal) via a progressive JPEG file that lacks an AC Huffman table.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01325 · Published 2018-09-10 · No fix listed CWE-682
Priority LOW 31
In ffjpeg (commit hash: caade60), the function bmp_load() in bmp.c contains an integer overflow vulnerability, which eventually results in the heap overflow in jfif_encode() in jfif.c.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00912 · Published 2022-05-05 · No fix listed CWE-190
Priority LOW 31
A Null Pointer Dereference vulnerability exits in ffjpeg d5cfd49 (2021-12-06) in bmp_load().
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00893 · Published 2022-02-11 · No fix listed CWE-476
Priority LOW 31
A global buffer overflow vulnerability in jfif_encode at jfif.c:701 of ffjpeg through 2020-06-22 allows attackers to cause a Denial of Service (DOS) via a crafted jpeg file.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0101 · Published 2021-07-15 · No fix listed CWE-120
Priority LOW 31
jfif_decode in jfif.c in ffjpeg through 2019-08-21 has a divide-by-zero error.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01085 · Published 2019-12-18 · No fix listed CWE-369
Priority LOW 31
bitstr_tell at bitstr.c in ffjpeg through 2019-08-21 has a NULL pointer dereference related to jfif_encode.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0114 · Published 2019-12-18 · No fix listed CWE-476
Priority LOW 31
ffjpeg before 2019-08-21 has a heap-based buffer overflow in jfif_load() at jfif.c.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01275 · Published 2019-09-16 · No fix listed CWE-787
Priority LOW 30
Global buffer overflow vulnerability exist in ffjpeg through 01.01.2021.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00819 · Published 2022-02-08 · No fix listed CWE-120
Priority LOW 30
Two Heap based buffer overflow vulnerabilities exist in ffjpeg through 01.01.2021.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00819 · Published 2022-02-08 · No fix listed CWE-787
Priority LOW 30
ffjpeg through 2020-02-24 has an invalid write in bmp_load in bmp.c.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00818 · Published 2020-05-24 · No fix listed CWE-787
Priority LOW 30
ffjpeg through 2020-02-24 has a heap-based buffer over-read in jfif_decode in jfif.c.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00818 · Published 2020-05-24 · No fix listed CWE-125
Priority LOW 30
ffjpeg through 2020-02-24 has an invalid read in jfif_encode in jfif.c.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0086 · Published 2020-05-24 · No fix listed CWE-125
Priority LOW 26
The function bitstr_tell at bitstr.c in ffjpeg commit 4ab404e has a NULL pointer dereference.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00816 · Published 2022-03-10 · No fix listed CWE-476
Priority LOW 26
A heap based buffer overflow vulnerability exists in ffjpeg through 2020-07-02 in the jfif_decode(void *ctxt, BMP *pb) function at ffjpeg/src/jfif.c (line 544 & line 545), which could cause a denial of service by submitt…
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00698 · Published 2021-05-18 · No fix listed CWE-787
Priority LOW 26
A stack-based buffer overflow vulnerability exists in ffjpeg through 2020-07-02 in the jfif_decode(void *ctxt, BMP *pb) function at ffjpeg/src/jfif.c:513:28, which could cause a denial of service by submitting a maliciou…
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00698 · Published 2021-05-18 · No fix listed CWE-787
Priority LOW 26
ffjpeg through 2020-02-24 has a heap-based buffer overflow in jfif_decode in jfif.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.0065 · Published 2020-07-01 · No fix listed CWE-787
THREATIST.IORead the docs