ok-file-formats project vulnerabilities

Recent CVEs affecting ok-file-formats project products. 11 tracked.

ok-file-formats project has 11 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2022-06-15. Highest priority: CVE-2021-28233 (score 52/100).

• CVE-2021-44343 HIGH 7.8 DOWNGRADE David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow
• CVE-2021-44342 HIGH 7.8 DOWNGRADE David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow via function ok_png_transform_scanline
• CVE-2021-44340 HIGH 7.8 MITIGATE David Brackeen ok-file-formats dev version is vulnerable to Buffer Overflow
• CVE-2021-44339 HIGH 7.8 DOWNGRADE David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow
• CVE-2021-44335 HIGH 7.8 DOWNGRADE David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow
• CVE-2021-44334 HIGH 7.8 DOWNGRADE David Brackeen ok-file-formats 97f78ca is vulnerable to Buffer Overflow
• CVE-2021-41413 HIGH 7.8 DOWNGRADE ok-file-formats master 2021-9-12 is affected by a buffer overflow in ok_jpg_convert_data_unit_grayscale and ok
• CVE-2021-32263 HIGH 7.8 UPGRADE ok-file-formats through 2021-04-29 has a heap-based buffer overflow in the ok_csv_circular_buffer_read functio
• CVE-2021-28233 HIGH 8.8 MITIGATE Heap-based Buffer Overflow vulnerability exists in ok-file-formats 1 via the ok_jpg_generate_huffman_table fun
• CVE-2020-23707 MEDIUM 6.5 UPGRADE A heap-based buffer overflow vulnerability in the function ok_jpg_decode_block_progressive() at ok_jpg.c:1054
• CVE-2020-23706 MEDIUM 6.5 UPGRADE A heap-based buffer overflow vulnerability in the function ok_jpg_decode_block_subsequent_scan() ok_jpg.c:1102

FAQ

How do I fix ok-file-formats project vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is ok-file-formats project being exploited right now?

None of the tracked ok-file-formats project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which ok-file-formats project CVE should I patch first?

CVE-2021-28233 currently ranks highest (52/100): Heap-based Buffer Overflow vulnerability exists in ok-file-formats 1 via the ok_jpg_generate_huffman_table fun.

Products

• ok-file-formats

RSS feed for ok-file-formats project · ← Back to latest CVEs