CVE-2020-23705 - A global buffer overflow vulnerability in jfif_encode at jfif.c:701 of ffjpeg through 2020-06-22 allows attackers to cause a Denial of Service (DOS) via a crafted jpeg file

Back Back to CVE browser

MEDIUM

A global buffer overflow vulnerability in jfif_encode at jfif.c:701 of ffjpeg through 2020-06-22 allows attackers to cause a Denial of Service (DOS) via a crafted jpeg file

Published Jul 15, 2021

6.5

MEDIUM

CVSS 3.1

EPSS 1.01%

Description

A global buffer overflow vulnerability in jfif_encode at jfif.c:701 of ffjpeg through 2020-06-22 allows attackers to cause a Denial of Service (DOS) via a crafted jpeg file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-120

Classic Buffer Overflow

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-16446
Advisory
https://github.com/rockcarry/ffjpeg/issues/25
x_refsource_MISCExploitIssue TrackingThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-16446		Advisory
https://github.com/rockcarry/ffjpeg/issues/25		x_refsource_MISCExploitIssue TrackingThird Party Advisory