OpenJPEG Buffer Overflow Vulnerability (CNVD-2017-25670)

OpenJPEG is a C-based open source JPEG 2000 codec . A buffer overflow vulnerability exists in the opjj2ksetcinemaparameters file lib/openjp2/j2k.c in OpenJPEG version 2.2.0. A remote attacker could exploit this vulnerability to cause a denial of service or code execution write across boundaries...

PT-2017-13283

Name of the Vulnerable Software and Affected Versions OpenJPEG version 2.2.0 Description A mishandled zero case was discovered in opj j2k set cinema parameters in lib/openjp2/j2k.c, causing an out-of-bounds write. This may lead to remote denial of service, specifically a heap-based buffer overflo...