Description
In ffjpeg (commit hash: caade60), the function bmp_load() in bmp.c contains an integer overflow vulnerability, which eventually results in the heap overflow in jfif_encode() in jfif.c. This is due to the incomplete patch for issue 38
Unscored
CVE-2022-28471
EUVD-2022-32914GHSA-8j68-4qj5-ccf7
In ffjpeg (commit hash: caade60), the function bmp_load() in bmp.c contains an integer overflow vulnerability, which eventually results in …
Published May 5, 2022 · Updated Aug 3, 2024 · Assigned by mitre