← All advisories

Medium severity6.5NVD Advisory· Published May 24, 2020· Updated Jun 17, 2026

CVE-2020-13439

CVE-2020-13439

Description

ffjpeg through 2020-02-24 has a heap-based buffer over-read in jfif_decode in jfif.c.

Affected products

4

Rockcarry/Ffjpeg2 versions
cpe:2.3:a:rockcarry:ffjpeg:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:rockcarry:ffjpeg:*:*:*:*:*:*:*:*range: <=2020-02-24
- (no CPE)range: <=2020-02-24
ffjpeg/ffjpegdescription
Ffjpeg/ffjpegllm-fuzzy
Range: <=2020-02-24

Patches

Vulnerability mechanics

References

1

github.com/rockcarry/ffjpeg/issues/24nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.