diff --git a/decode/tinyjpeg.c b/decode/tinyjpeg.c
index 75aedae..948ffae 100644
--- a/decode/tinyjpeg.c
+++ b/decode/tinyjpeg.c
@@ -816,6 +816,8 @@ int tinyjpeg_decode(struct jdec_private *priv)
         vaDestroyConfig(va_dpy, config_id);
         vaDestroyContext(va_dpy, context_id);
 
+        if (scan_num > JPEG_SCAN_MAX)
+            break;
         parse_JFIF(priv, priv->stream);
         if (priv->width[scan_num] == 0 && priv->height[scan_num] == 0)
             break;