PT-2022-12046

CVE-2021-44340

·

Published

2022-02-28

·

Updated

2022-03-08

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions David Brackeen ok-file-formats dev version
Description The issue is related to a Buffer Overflow vulnerability. When the function of the ok-file-formats project is used, a heap-buffer-overflow occurs in the ok jpg generate huffman table() function located in "/ok jpg.c:403".
Recommendations For the dev version, consider disabling the ok jpg generate huffman table() function until a patch is available to prevent potential exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾