CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
A Null Pointer Dereference vulnerability exits in ffjpeg d5cfd49 (2021-12-06) in bmp_load(). When the size information in metadata of the bmp is out of range, it returns without assign memory buffer to `pb->pdata` and did not exit the program. So the program crashes when it tries to access the pb->data, in jfif_encode( |
| 11/02/2022 |
| CVE-2021-44957 | MITTEL6.5 | Global buffer overflow vulnerability exist in ffjpeg through 01.01.2021. It is similar to CVE-2020-23705. Issue is in the jfif_encode function at ffjpeg/src/jfif.c (line 708) could cause a Denial of Service by using a crafted jpeg file. | 08/02/2022 |
| CVE-2021-44956 | MITTEL6.5 | Two Heap based buffer overflow vulnerabilities exist in ffjpeg through 01.01.2021. It is similar to CVE-2020-23852. Issues that are in the jfif_decode function at ffjpeg/src/jfif.c (line 552) could cause a Denial of Service by using a crafted jpeg file. | 08/02/2022 |
| CVE-2020-23705 | MITTEL6.5 | A global buffer overflow vulnerability in jfif_encode at jfif.c:701 of ffjpeg through 2020-06-22 allows attackers to cause a Denial of Service (DOS) via a crafted jpeg file. | 15/07/2021 |
| CVE-2020-23852 | MITTEL5.5 | A heap based buffer overflow vulnerability exists in ffjpeg through 2020-07-02 in the jfif_decode(void *ctxt, BMP *pb) function at ffjpeg/src/jfif.c (line 544 & line 545), which could cause a denial of service by submitting a malicious jpeg image. | 18/05/2021 |
| CVE-2020-23851 | MITTEL5.5 | A stack-based buffer overflow vulnerability exists in ffjpeg through 2020-07-02 in the jfif_decode(void *ctxt, BMP *pb) function at ffjpeg/src/jfif.c:513:28, which could cause a denial of service by submitting a malicious jpeg image. | 18/05/2021 |
| CVE-2020-15470 | MITTEL5.5 | ffjpeg through 2020-02-24 has a heap-based buffer overflow in jfif_decode in jfif.c. | 01/07/2020 |
| CVE-2020-13440 | MITTEL6.5 | ffjpeg through 2020-02-24 has an invalid write in bmp_load in bmp.c. | 24/05/2020 |
| CVE-2020-13439 | MITTEL6.5 | ffjpeg through 2020-02-24 has a heap-based buffer over-read in jfif_decode in jfif.c. | 24/05/2020 |
| CVE-2020-13438 | MITTEL6.5 | ffjpeg through 2020-02-24 has an invalid read in jfif_encode in jfif.c. | 24/05/2020 |
| CVE-2019-19888 | MITTEL6.5 | jfif_decode in jfif.c in ffjpeg through 2019-08-21 has a divide-by-zero error. | 18/12/2019 |
| CVE-2019-19887 | MITTEL6.5 | bitstr_tell at bitstr.c in ffjpeg through 2019-08-21 has a NULL pointer dereference related to jfif_encode. | 18/12/2019 |
| CVE-2019-16352 | MITTEL6.5 | ffjpeg before 2019-08-21 has a heap-based buffer overflow in jfif_load() at jfif.c. | 16/09/2019 |
| CVE-2019-16351 | MITTEL6.5 | ffjpeg before 2019-08-18 has a NULL pointer dereference in huffman_decode_step() at huffman.c. | 16/09/2019 |
| CVE-2019-16350 | MITTEL6.5 | ffjpeg before 2019-08-18 has a NULL pointer dereference in idct2d8x8() at dct.c. | 16/09/2019 |
| CVE-2018-16781 | MITTEL6.5 | ffjpeg.dll in ffjpeg before 2018-08-22 allows remote attackers to cause a denial of service (FPE signal) via a progressive JPEG file that lacks an AC Huffman table. | 10/09/2018 |