ffjpeg Denial of Service Vulnerability (CNVD-2022-12798)

ffjpeg is a JPEG encoder/decoder by Kai Chen, a personal developer in China. ffjpeg suffers from a denial vulnerability that stems from when the size information in the bmp’s metadata is out of range, it returns without allocating a memory buffer to pb->pdata and without exiting the program. An attacker could exploit this vulnerability to cause the program to crash.