PT-2019-18401

Name of the Vulnerable Software and Affected Versions OpenJPEG version 2.3.0 Description An issue in OpenJPEG allows remote attackers to cause a denial of service through attempted excessive memory allocation. This occurs in the opj calloc function in openjp2/opj malloc.c when called from opj tcd...

Denial Of Service (DoS)

openjpeg is vulnerable to denial of service DoS attacks. The vulnerability exists through a heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted JPEG2000 file...

Denial Of Service (DoS)

openjpeg is vulnerable to denial of service. Insufficient memoory was allocated when encoding JPEG 2000 files from input images containing certain color depths. This allows a remote attacker to abuse the vulnerability to crash the application, or potentially execute arbitrary code on the system,...

Denial Of Service (DoS)

openjpeg is vulnerable to denial of service. A remote attacker is able to crash the process, or potentially execute arbitrary code in the context of the process worker, via a malicious OpenJPEG image to cause a heap-based buffer overflow...

Updated openjpeg2 packages fix security vulnerabilities

A stack-based buffer overflow in the pgxtoimage function in jpwl/convert.c could crash the converter CVE-2017-17479. A stack-based buffer overflow in the pgxtovolume function in jp3d/convert.c could crash the converter CVE-2017-17480. A flaw was found in OpenJPEG 2.3.0, there is an integer overfl...

MGASA-2019-0004 Updated openjpeg2 packages fix security vulnerabilities

A stack-based buffer overflow in the pgxtoimage function in jpwl/convert.c could crash the converter CVE-2017-17479. A stack-based buffer overflow in the pgxtovolume function in jp3d/convert.c could crash the converter CVE-2017-17480. A flaw was found in OpenJPEG 2.3.0, there is an integer overfl...

[SECURITY] Fedora 28 Update: openjpeg2-2.3.0-10.fc28

The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...

[SECURITY] Fedora 29 Update: openjpeg2-2.3.0-10.fc29

The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...

OpenJPEG Denial of Service Vulnerability (CNVD-2018-26010)

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability exists in the 'imagetopnm' function in the jp2/convert.c file in OpenJPEG version 2.3.0. An attacker can exploit this vulnerability to cause a denial of service null pointer backreference...

[SECURITY] Fedora 28 Update: openjpeg2-2.3.0-9.fc28

The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...

[SECURITY] Fedora 27 Update: openjpeg2-2.3.0-9.fc27

The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...

DEBIAN-CVE-2018-18088

OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c...

Null pointer dereference

OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c...

CVE-2018-18088

OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c...

CVE-2018-18088

OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c...

ALPINE-CVE-2018-18088

OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c...

CVE-2018-18088

OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c...

CVE-2018-18088

OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c...

CVE-2018-18088

OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c...

CVE-2018-18088

CVE-2018-18088 affects OpenJPEG 2.3.0 with a NULL pointer dereference in imagetopnm (jp2/convert.c). Impact: potential denial of service or crash. Public advisories from multiple vendors (Ubuntu USN-4109-1, Debian DSA-4405, SUSE SUSE-SU-2025-03352/03353, EulerOS) confirm the fix in later/OpenJPEG...