CVE-2022-28471

In ffjpeg (commit hash: caade60), the function bmp_load() in bmp.c contains an integer overflow vulnerability, which eventually results in the heap overflow in…

published May 5, 2022

CVSS
—
EPSS
1%
Percentile
59.6
In the wild
Unconfirmed
What it is

In ffjpeg (commit hash: caade60), the function bmp_load() in bmp.c contains an integer overflow vulnerability, which eventually results in the heap overflow in jfif_encode() in jfif.c. This is due to the incomplete patch for issue 38

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00912 · 59.6th percentile
Published
2022-05-05T12:37Z
EPSS history
Timeline
  • 05 MAY 12:37Z
    In ffjpeg (commit hash: caade60), the function bmp_load() in bmp.c contains an integer overflow vulnerability, which eventually results in the heap overflow in…
    cvelistv5