A stack-based buffer overflow vulnerability exists in ffjpeg through 2020-07-02 in the jfif_decode(void *ctxt BMP *pb) function at ffjpeg/src/jfif.c:513:28 which could cause a denial of service by submitting a malicious jpeg image.