CVE-2021-44956

Two Heap based buffer overflow vulnerabilities exist in ffjpeg through 01.01.2021

published February 8, 2022

CVSS
—
EPSS
1%
Percentile
56.7
In the wild
Unconfirmed
What it is

Two Heap based buffer overflow vulnerabilities exist in ffjpeg through 01.01.2021. It is similar to CVE-2020-23852. Issues that are in the jfif_decode function at ffjpeg/src/jfif.c (line 552) could cause a Denial of Service by using a crafted jpeg file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00819 · 56.7th percentile
Published
2022-02-08T14:13Z
EPSS history
Timeline
  • 08 FEB 14:13Z
    Two Heap based buffer overflow vulnerabilities exist in ffjpeg through 01.01.2021
    cvelistv5