Back to Database
Status published
Medium
CVE-2020-23706
A heap-based buffer overflow vulnerability in the function ok_jpg_decode_block_subsequent_scan() ok_jpg.c:1102...
Vulnerability Description
A heap-based buffer overflow vulnerability in the function ok_jpg_decode_block_subsequent_scan() ok_jpg.c:1102 of ok-file-formats through 2020-06-26 allows attackers to cause a Denial of Service (DOS) via a crafted jpeg file.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-23706
Credits & Attribution
No credits recorded in the NVD database.
More from ok-file-formats project
View All →CVE-2021-44343
David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow. When...
High
7.8
CVE-2021-44342
David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow via...
High
7.8
CVE-2021-44340
David Brackeen ok-file-formats dev version is vulnerable to Buffer Overflow....
High
7.8
CVE-2021-44339
David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow. When...
High
7.8
CVE-2021-44335
David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow. When...
High
7.8
Affected Vendor
ok-file-formats project
View all reports →Affected Software
ok-file-formats
Vulnerable Versions:
0
Timeline
Official Publish:
July 15th, 2021
Last Modified:
August 4th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.