ok-file-formats_project 関連製品全体の CVE とセキュリティ脆弱性情報を集約し、CVSS、EPSS、公開日、脆弱性情報データを掲載しています。
一般的な弱点パターンには vendor risk memory corruption and バッファオーバーフロー があり、vendor surface production workloads and vendor surface software deployment の利用場面で vendor impact memory corruption and アプリケーションクラッシュ などのリスクが生じる可能性があります。
掲載データは公開脆弱性情報とセキュリティ公告に基づき、過去の暴露面と修補優先度の評価に利用できます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2021-41413 | ok-file-formats master 2021-9-12 is affected by a buffer overflow in ok_jpg_convert_data_unit_grayscale and ok_jpg_convert_YCbCr_to_RGB. | [email protected] | 7.8 | 0.79% | 2022-06-15 | 2026-06-17 |
| CVE-2021-44343 | David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow. When the function of the ok-file-formats project is used, a heap-buffer-overflow occurred in function ok_png_read_data() in "/ok_png.c". | [email protected] | 7.8 | 0.72% | 2022-03-02 | 2026-06-17 |
| CVE-2021-44335 | David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow. When the function of the ok-file-formats project is used, a heap-buffer-overflow occurs in function ok_png_transform_scanline() in "/ok_png.c:533". | [email protected] | 7.8 | 0.72% | 2022-03-02 | 2026-06-17 |
| CVE-2021-44342 | David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow via function ok_png_transform_scanline() in "/ok_png.c:494". | [email protected] | 7.8 | 0.72% | 2022-02-28 | 2026-06-17 |
| CVE-2021-44340 | David Brackeen ok-file-formats dev version is vulnerable to Buffer Overflow. When the function of the ok-file-formats project is used, a heap-buffer-overflow occurred in function ok_jpg_generate_huffman_table() in "/ok_jpg.c:403". | [email protected] | 7.8 | 0.72% | 2022-02-28 | 2026-06-17 |
| CVE-2021-44339 | David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow. When the function of the ok-file-formats project is used, a heap-buffer-overflow occurred in function ok_png_transform_scanline() in "/ok_png.c:712". | [email protected] | 7.8 | 0.72% | 2022-02-28 | 2026-06-17 |
| CVE-2021-44334 | David Brackeen ok-file-formats 97f78ca is vulnerable to Buffer Overflow. When the function of the ok-file-formats project is used, a heap-buffer-overflow occurs in function ok_jpg_convert_YCbCr_to_RGB() in "/ok_jpg.c:513" . | [email protected] | 7.8 | 0.72% | 2022-02-28 | 2026-06-17 |
| CVE-2021-28233 | Heap-based Buffer Overflow vulnerability exists in ok-file-formats 1 via the ok_jpg_generate_huffman_table function in ok_jpg.c. | [email protected] | 8.8 | 1.06% | 2021-08-27 | 2026-06-16 |
| CVE-2021-32263 | ok-file-formats through 2021-04-29 has a heap-based buffer overflow in the ok_csv_circular_buffer_read function in ok_csv.c. | [email protected] | 7.8 | 0.87% | 2021-08-24 | 2026-06-16 |
| CVE-2020-23707 | A heap-based buffer overflow vulnerability in the function ok_jpg_decode_block_progressive() at ok_jpg.c:1054 of ok-file-formats through 2020-06-26 allows attackers to cause a Denial of Service (DOS) via a crafted jpeg file. | [email protected] | 6.5 | 1.10% | 2021-07-15 | 2026-06-16 |
| CVE-2020-23706 | A heap-based buffer overflow vulnerability in the function ok_jpg_decode_block_subsequent_scan() ok_jpg.c:1102 of ok-file-formats through 2020-06-26 allows attackers to cause a Denial of Service (DOS) via a crafted jpeg file. | [email protected] | 6.5 | 1.01% | 2021-07-15 | 2026-06-16 |
| CVE-2018-20618 | ok-file-formats through 2018-10-16 has a heap-based buffer over-read in the ok_mo_decode2 function in ok_mo.c. | [email protected] | 8.8 | 1.42% | 2018-12-31 | 2026-06-16 |
| CVE-2018-20617 | ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the ok_csv_decode2 function in ok_csv.c. | [email protected] | 8.8 | 1.14% | 2018-12-31 | 2026-06-16 |
| CVE-2018-20616 | ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the ok_wav_decode_ms_adpcm_data function in ok_wav.c. | [email protected] | 8.8 | 1.14% | 2018-12-31 | 2026-06-16 |