CVE-2021-44956

Two Heap based buffer overflow vulnerabilities exist in ffjpeg through 01.01.2021. It is similar to CVE-2020-23852. Issues that are in the jfif_decode function at ffjpeg/src/jfif.c (line 552) could cause a Denial of Service by using a crafted jpeg file.

• CWE-787

• https://github.com/rockcarry/ffjpeg/issues/43Exploit, Issue Tracking, Third Party Advisory
• https://github.com/rockcarry/ffjpeg/issues/43Exploit, Issue Tracking, Third Party Advisory

Published

Feb 8, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-44935glFusion CMS v1.7.9 is affected by an arbitrary user imperso…9.1
• CVE-2021-44937glFusion CMS v1.7.9 is affected by an arbitrary user registr…5.3
• CVE-2021-44942glFusion CMS 1.7.9 is affected by a Cross Site Request Forge…4.3
• CVE-2021-44948Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-44949glFusion CMS 1.7.9 is affected by an access control vulnerab…9.8
• CVE-2021-44954In QVIS NVR DVR before 2021-12-13, an attacker can escalate …7.8
• CVE-2021-44957Global buffer overflow vulnerability exist in ffjpeg through…6.5
• CVE-2021-44960In SVGPP SVG++ library 1.3.0, the XMLDocument::getRoot funct…6.5
• CVE-2021-44961A memory leakage flaw exists in the class PerimeterGenerator…5.5
• CVE-2021-44962An out-of-bounds read vulnerability exists in the GCode::ext…5.5
• CVE-2021-44964Use after free in garbage collector and finalizer of lgc.c i…6.3
• CVE-2021-44965Directory traversal vulnerability in /admin/includes/* direc…7.5