PT-2021-10932 · Unknown · Ok-File-Formats
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
ok-file-formats through 2020-06-26
Description
A heap-based buffer overflow issue in the
ok jpg decode block progressive() function at ok jpg.c:1054 allows attackers to cause a Denial of Service (DOS) via a crafted jpeg file.Recommendations
For ok-file-formats through 2020-06-26, consider disabling the
ok jpg decode block progressive() function until a patch is available to prevent Denial of Service attacks via crafted jpeg files.Exploit
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ok-File-Formats