CVE-2021-44334

HIGH

ok-file-formats - Heap-Based Buffer Overflow in ok_jpg_convert_YCbCr_to_RGB

Title source: llm

Description

David Brackeen ok-file-formats 97f78ca is vulnerable to Buffer Overflow. When the function of the ok-file-formats project is used, a heap-buffer-overflow occurs in function ok_jpg_convert_YCbCr_to_RGB() in "/ok_jpg.c:513" .

References (1)

Core 1

Core References

Exploit, Issue Tracking, Third Party Advisory x_refsource_misc

https://github.com/brackeen/ok-file-formats/issues/12

Scores

CVSS v3 7.8

EPSS 0.0072

EPSS Percentile 49.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-787

Status published

Products (1)

ok-file-formats_project/ok-file-formats 2021-03-06

Published Feb 28, 2022

Tracked Since Feb 18, 2026