CVE-2022-28471 | BDVDB-2026-175387 Detail

Description#

In ffjpeg (commit hash: caade60), the function bmp_load() in bmp.c contains an integer overflow vulnerability, which eventually results in the heap overflow in jfif_encode() in jfif.c. This is due to the incomplete patch for issue 38

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/rockcarry/ffjpeg/issues/49

Exploit#

No public exploit known

History#

Version 12022-05-05Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.