CVE-2021-44334

Name of the Vulnerable Software and Affected Versions David Brackeen ok-file-formats version 97f78ca

Description The issue is related to a Buffer Overflow vulnerability. When the function of the ok-file-formats project is used, a heap-buffer-overflow occurs in the ok jpg convert YCbCr to RGB() function in the "/ok jpg.c:513" file.

Recommendations For version 97f78ca, consider disabling the ok jpg convert YCbCr to RGB() function as a temporary workaround until a patch is available. Restrict access to the /ok jpg.c file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.