openjpeg: null pointer dereference in opj_tgt_reset function in lib/openjp2/tgt.c

A flaw was found in OpenJPEG’s t2 encoder. This flaw allows an attacker who can provide crafted input to be processed by OpenJPEG to cause a NULL pointer dereference issue. The highest threat to this vulnerability is to system availability...

openjpeg: out-of-bounds read in opj_t2_encode_packet function in openjp2/t2.c

A flaw was found in OpenJPEG. This flaw allows an attacker to provide specially crafted input to the conversion or encoding functionality, causing an out-of-bounds read. The highest threat from this vulnerability is system availability...

openjpeg: out-of-bounds write due to an integer overflow in opj_compress.c

There is a flaw in the opj2compress program in openjpeg2. An attacker who is able to submit a large number of image files to be processed in a directory by opj2compress, could trigger a heap out-of-bounds write due to an integer overflow, which is caused by the large number of image files. The...

openjpeg: denial of service in function opj_t1_encode_cblks in openjp2/t1.c

In OpenJPEG 2.3.1, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616...

Moderate: openjpeg2 security update

OpenJPEG is an open source library for reading and writing image files in JPEG2000 format. The following packages have been upgraded to a later upstream version: openjpeg2 2.4.0. Security Fixes: openjpeg: use-after-free and double-free via a mix of valid and invalid files in a directory operated ...

RLSA-2021:4251 Moderate: openjpeg2 security update

OpenJPEG is an open source library for reading and writing image files in JPEG2000 format. The following packages have been upgraded to a later upstream version: openjpeg2 2.4.0. Security Fixes: openjpeg: use-after-free and double-free via a mix of valid and invalid files in a directory operated ...

Huawei EulerOS: Security Advisory for openjpeg (EulerOS-SA-2021-2601)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : openjpeg (EulerOS-SA-2021-2601)

According to the versions of the openjpeg package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in OpenJPEG's encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during...

OESA-2021-1363 openjpeg2 security update

OpenJPEG is an open-source JPEG 2000 codec written in C language. It has been developed in order to promote the use of JPEG 2000, a still-image compression standard from the Joint Photographic Experts Group JPEG. Since April 2015, it is officially recognized by ISO/IEC and ITU-T as a JPEG 2000...

EulerOS 2.0 SP8 : openjpeg (EulerOS-SA-2021-2478)

According to the versions of the openjpeg package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in OpenJPEGs encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during...

Huawei EulerOS: Security Advisory for openjpeg (EulerOS-SA-2021-2478)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for openjpeg (EulerOS-SA-2021-2414)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : openjpeg (EulerOS-SA-2021-2414)

According to the versions of the openjpeg package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in OpenJPEG's encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during...

EulerOS 2.0 SP5 : openjpeg (EulerOS-SA-2021-2341)

According to the versions of the openjpeg package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in OpenJPEG's encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during...

Huawei EulerOS: Security Advisory for openjpeg (EulerOS-SA-2021-2341)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : openjpeg2 (EulerOS-SA-2021-2250)

According to the versions of the openjpeg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in OpenJPEG's encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during...

PT-2021-7871 · Openjpeg2 +11 · Openjpeg2 +11

Name of the Vulnerable Software and Affected Versions: openjpeg2 version 2.4.0 Description: A flaw was found in the opj2 decompress program in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it...

The vulnerability of the OpenJPEG library for image encoding and decoding lies in the fact that the output of the operation is limited to a buffer size. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OpenJPEG library for image encoding and decoding is related to the execution of operations within acceptable buffer data limits. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failure...

The vulnerability of the opj_dwt_calc_explicit_stepsizes() function in the OpenJPEG image encoding and decoding library lies in the lack of a mechanism to verify the size of the copied data. This allows an attacker to trigger a service failure.

The vulnerability of the opjdwtcalcexplicitstepsizes function in the OpenJPEG image encoding and decoding library is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability allows an attacker to trigger a service failure remotely...

The vulnerability in the `src/lib/openjp2/pi.c` file of the OpenJPEG image encoding and decoding library occurs when the output of certain operations exceeds the allowable buffer data size. This allows an attacker to trigger a service failure.

The vulnerability in the src/lib/openjp2/pi.c component of the OpenJPEG image encoding and decoding library is related to the execution of operations that exceed the allowable buffer size limits. Exploiting this vulnerability allows a remote attacker to cause service interruptions...