The read_chunk function in flif-dec.cpp in Free Lossless Image Format (FLIF) 0.3 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted flif file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Flif | Flif | 0.3 (including) | 0.3 (including) |
| Jasper | Jasper_project | * | 2.0.16 (including) |
| Flif | Ubuntu | trusty | * |