Rockcarry
Rockcarry Ffjpeg: vulnerabilidades y CVE
Rockcarry Ffjpeg tiene 19 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE19
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2020-24222 | Alta (7.8) | 0.33% | — | 11 ago 2023 | Buffer Overflow vulnerability in jfif_decode() function in rockcarry ffjpeg through version 1.0.0, allows local attackers to execute arbitrary code due to an issue with ALIGN. |
| CVE-2022-28471 | Media (6.5) | 0.91% | — | 5 may 2022 | In ffjpeg (commit hash: caade60), the function bmp_load() in bmp.c contains an integer overflow vulnerability, which eventually results in the heap overflow in jfif_encode() in jfif.c. This is due to the incomplete… |
| CVE-2021-34122 | Media (5.5) | 0.82% | — | 10 mar 2022 | The function bitstr_tell at bitstr.c in ffjpeg commit 4ab404e has a NULL pointer dereference. |
| CVE-2021-45385 | Media (6.5) | 0.89% | — | 11 feb 2022 | A Null Pointer Dereference vulnerability exits in ffjpeg d5cfd49 (2021-12-06) in bmp_load(). When the size information in metadata of the bmp is out of range, it returns without assign memory buffer to `pb->pdata` and… |
| CVE-2021-44957 | Media (6.5) | 0.82% | — | 8 feb 2022 | Global buffer overflow vulnerability exist in ffjpeg through 01.01.2021. It is similar to CVE-2020-23705. Issue is in the jfif_encode function at ffjpeg/src/jfif.c (line 708) could cause a Denial of Service by using a… |
| CVE-2021-44956 | Media (6.5) | 0.82% | — | 8 feb 2022 | Two Heap based buffer overflow vulnerabilities exist in ffjpeg through 01.01.2021. It is similar to CVE-2020-23852. Issues that are in the jfif_decode function at ffjpeg/src/jfif.c (line 552) could cause a Denial of… |
| CVE-2020-23705 | Media (6.5) | 1.0% | — | 15 jul 2021 | A global buffer overflow vulnerability in jfif_encode at jfif.c:701 of ffjpeg through 2020-06-22 allows attackers to cause a Denial of Service (DOS) via a crafted jpeg file. |
| CVE-2020-23852 | Media (5.5) | 0.70% | — | 18 may 2021 | A heap based buffer overflow vulnerability exists in ffjpeg through 2020-07-02 in the jfif_decode(void *ctxt, BMP *pb) function at ffjpeg/src/jfif.c (line 544 & line 545), which could cause a denial of service by… |
| CVE-2020-23851 | Media (5.5) | 0.70% | — | 18 may 2021 | A stack-based buffer overflow vulnerability exists in ffjpeg through 2020-07-02 in the jfif_decode(void *ctxt, BMP *pb) function at ffjpeg/src/jfif.c:513:28, which could cause a denial of service by submitting a… |
| CVE-2020-15470 | Media (5.5) | 0.65% | — | 1 jul 2020 | ffjpeg through 2020-02-24 has a heap-based buffer overflow in jfif_decode in jfif.c. |
| CVE-2020-13440 | Media (6.5) | 0.82% | — | 24 may 2020 | ffjpeg through 2020-02-24 has an invalid write in bmp_load in bmp.c. |
| CVE-2020-13439 | Media (6.5) | 0.82% | — | 24 may 2020 | ffjpeg through 2020-02-24 has a heap-based buffer over-read in jfif_decode in jfif.c. |
| CVE-2020-13438 | Media (6.5) | 0.84% | — | 24 may 2020 | ffjpeg through 2020-02-24 has an invalid read in jfif_encode in jfif.c. |
| CVE-2019-19888 | Media (6.5) | 1.1% | — | 18 dic 2019 | jfif_decode in jfif.c in ffjpeg through 2019-08-21 has a divide-by-zero error. |
| CVE-2019-19887 | Media (6.5) | 1.1% | — | 18 dic 2019 | bitstr_tell at bitstr.c in ffjpeg through 2019-08-21 has a NULL pointer dereference related to jfif_encode. |
| CVE-2019-16352 | Media (6.5) | 1.3% | — | 16 sept 2019 | ffjpeg before 2019-08-21 has a heap-based buffer overflow in jfif_load() at jfif.c. |
| CVE-2019-16351 | Media (6.5) | 1.3% | — | 16 sept 2019 | ffjpeg before 2019-08-18 has a NULL pointer dereference in huffman_decode_step() at huffman.c. |
| CVE-2019-16350 | Media (6.5) | 1.3% | — | 16 sept 2019 | ffjpeg before 2019-08-18 has a NULL pointer dereference in idct2d8x8() at dct.c. |
| CVE-2018-16781 | Media (6.5) | 1.3% | — | 10 sept 2018 | ffjpeg.dll in ffjpeg before 2018-08-22 allows remote attackers to cause a denial of service (FPE signal) via a progressive JPEG file that lacks an AC Huffman table. |