PT-2022-19049 · Ffjpeg · Ffjpeg

0Xdd96 · Published 2022-05-05 · Updated 2023-08-17 · CVE-2022-28471

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ffjpeg (affected versions not specified)

Description The issue is related to an integer overflow vulnerability in the bmp load() function in bmp.c, which can lead to a heap overflow in jfif encode() in jfif.c. This vulnerability is a result of an incomplete patch for a previous issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2022-28471

Affected Products

Ffjpeg

References · 4

• 🔥 https://github.com/rockcarry/ffjpeg/issues/49 · Exploit
• https://osv.dev/vulnerability/CVE-2022-28471 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-28471 · Security Note
• https://t.me/cibsecurity/41984 · Telegram Post