CVE-2017-14152

OpenJPEG 2.2.0 contains CVE-2017-14152: a mishandled zero case in opj_j2k_set_cinema_parameters (lib/openjp2/j2k.c) can cause an out-of-bounds write, potentially leading to remote denial of service or remote code execution. Affected functions include opj_write_bytes_LE (lib/openjp2/cio.c) and opj...