PT-2022-12046
CVE-2021-44340
·
Published
2022-02-28
·
Updated
2022-03-08
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
David Brackeen ok-file-formats dev version
Description
The issue is related to a Buffer Overflow vulnerability. When the function of the ok-file-formats project is used, a heap-buffer-overflow occurs in the
ok jpg generate huffman table() function located in "/ok jpg.c:403".Recommendations
For the dev version, consider disabling the
ok jpg generate huffman table() function until a patch is available to prevent potential exploitation.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾