PatchTheCVEok-file-formats vulnerabilities and fixes
Recent CVEs affecting ok-file-formats, with upgrade or downgrade steps. 11 tracked.
Also searched as: ok file formats.
ok-file-formats has 11 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2022-06-15. Highest priority: CVE-2021-28233 (score 52/100).
- CVE-2021-44343 HIGH 7.8 DOWNGRADE David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow
- CVE-2021-44342 HIGH 7.8 DOWNGRADE David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow via function ok_png_transform_scanline
- CVE-2021-44340 HIGH 7.8 MITIGATE David Brackeen ok-file-formats dev version is vulnerable to Buffer Overflow
- CVE-2021-44339 HIGH 7.8 DOWNGRADE David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow
- CVE-2021-44335 HIGH 7.8 DOWNGRADE David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow
- CVE-2021-44334 HIGH 7.8 DOWNGRADE David Brackeen ok-file-formats 97f78ca is vulnerable to Buffer Overflow
- CVE-2021-41413 HIGH 7.8 DOWNGRADE ok-file-formats master 2021-9-12 is affected by a buffer overflow in ok_jpg_convert_data_unit_grayscale and ok
- CVE-2021-32263 HIGH 7.8 UPGRADE ok-file-formats through 2021-04-29 has a heap-based buffer overflow in the ok_csv_circular_buffer_read functio
- CVE-2021-28233 HIGH 8.8 MITIGATE Heap-based Buffer Overflow vulnerability exists in ok-file-formats 1 via the ok_jpg_generate_huffman_table fun
- CVE-2020-23707 MEDIUM 6.5 UPGRADE A heap-based buffer overflow vulnerability in the function ok_jpg_decode_block_progressive() at ok_jpg.c:1054
- CVE-2020-23706 MEDIUM 6.5 UPGRADE A heap-based buffer overflow vulnerability in the function ok_jpg_decode_block_subsequent_scan() ok_jpg.c:1102
FAQ
How do I fix ok-file-formats vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ok-file-formats being exploited right now?
None of the tracked ok-file-formats CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ok-file-formats CVE should I patch first?
CVE-2021-28233 currently ranks highest (52/100): Heap-based Buffer Overflow vulnerability exists in ok-file-formats 1 via the ok_jpg_generate_huffman_table fun.