Lucene search

K
cvelistRedhatCVELIST:CVE-2022-1122
HistoryMar 29, 2022 - 5:25 p.m.

CVE-2022-1122

2022-03-2917:25:44
CWE-665
redhat
www.cve.org
1

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.1%

A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free() on an uninitialized pointer, leading to a segmentation fault and a denial of service.

CNA Affected

[
  {
    "product": "openjpeg2",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "openjpeg2 version 2.4.0 and prior"
      }
    ]
  }
]