Out-of-bounds

In FreeImage 3.18.0, an out-of-bounds access occurs because of mishandling of the OpenJPEG j2kreadppmv3 function in j2k.c. The value of lNppm comes from the file read in, and the code does not consider that lNppm may be greater than the size of pheaderdata...

CVE-2019-12214

In FreeImage 3.18.0, an out-of-bounds access occurs because of mishandling of the OpenJPEG j2kreadppmv3 function in j2k.c. The value of lNppm comes from the file read in, and the code does not consider that lNppm may be greater than the size of pheaderdata...

CVE-2019-12214

CVE-2019-12214 affects FreeImage 3.18.0 where an out-of-bounds access can occur due to mishandling of the OpenJPEG j2k_read_ppm_v3 function in j2k.c. The value l_N_ppm is derived from the input file, and the code does not ensure it is within the bounds of p_header_data, enabling potential memory ...

CVE-2019-12214

In FreeImage 3.18.0, an out-of-bounds access occurs because of mishandling of the OpenJPEG j2kreadppmv3 function in j2k.c. The value of lNppm comes from the file read in, and the code does not consider that lNppm may be greater than the size of pheaderdata...

CVE-2019-12214

In FreeImage 3.18.0, an out-of-bounds access occurs because of mishandling of the OpenJPEG j2kreadppmv3 function in j2k.c. The value of lNppm comes from the file read in, and the code does not consider that lNppm may be greater than the size of pheaderdata...

CVE-2019-12214: Out-of-bounds Read

In FreeImage 3.18.0, an out-of-bounds access occurs because of mishandling of the OpenJPEG j2kreadppmv3 function in j2k.c. The value of lNppm comes from the file read in, and the code does not consider that lNppm may be greater than the size of pheaderdata...

PT-2019-12701

Name of the Vulnerable Software and Affected Versions FreeImage version 3.18.0 Description The issue arises from the mishandling of the OpenJPEG j2k read ppm v3 function in j2k.c, leading to an out-of-bounds access. This occurs because the value of l N ppm comes from the file being read, and the...

CVE-2018-14423

Division-by-zero vulnerabilities in the functions pinextpcrl, pinextcprl, and pinextrpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service application crash...

CVE-2018-18088

OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c...

Denial Of Service (DoS)

OpenJPEG is vulnerable to denial of service attacks. A remote unauthenticated attacker could exploit the vulnerable PDFium component to cause denial of service conditions via crafted JPEG 2000 data that is mishandled during opjalignedmalloc calls in dwt.c and t1.c...

Denial Of Service (DoS)

OpenJPEG is vulnerable to denial of service attacks. A remote unauthenticated attacker could exploit the vulnerable PDFium component to cause denial of service conditions via crafted JPEG 2000 data. Affected function is opjtcdinittile in the file tcd.c...

Arbitrary Code Execution And Denial Of Service

OpenJPEG is vulnerable to arbitrary code execution and denial of service attacks. A remote unauthenticated attacker could cause application crash or potential code execution due to a heap-based buffer overflow flaw via a specifically crafted j2k image...

Arbitrary Code Execution

OpenJPEG is vulnerable to arbitrary code execution attacks. A remote unauthenticated attacker could exploit the vulnerable JP2 File Handler component to cause code execution via a crafted JP2 file, which triggers an out-of-bounds read or write...

Heap-based Buffer Overflow

OpenJPEG is vulnerable to Heap-based Buffer Overflow. An attacker could create a specially crafted OpenJPEG image that, when opened, could cause an application using openjpeg to crash or, possibly, execute arbitrary code with the privileges of the user running the application...

Heap-based Buffer Over-read

OpenJPEG is an open source library for reading and writing image files in JPEG 2000 format. Multiple heap-based buffer overflow flaws were found in OpenJPEG. An attacker could create a specially crafted OpenJPEG image that, when opened, could cause an application using openjpeg to crash or,...

Heap-based Buffer Over-read

OpenJPEG is an open source library for reading and writing image files in JPEG 2000 format. Multiple heap-based buffer overflow flaws were found in OpenJPEG. An attacker could create a specially crafted OpenJPEG image that, when opened, could cause an application using openjpeg to crash or,...

Denial Of Service (DoS) And Remote Code Execution (RCE)

OpenJPEG is an open source library for reading and writing image files in JPEG 2000 format. An input validation flaw, leading to a heap-based buffer overflow, was found in the way OpenJPEG handled the tile number and size in an image tile header. A remote attacker could provide a specially-crafte...

OpenJPEG Heap Buffer Overflow DoS

The vulnerability of the imagetopnm function in the OpenJPEG image encoding and decoding library is related to the use of a null pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

OpenJPEG Integer Overflow DoS

The vulnerability of the opjj2ksetupencoder function in the OpenJPEG image encoding and decoding library is related to a numerical overflow caused by a left shift operation. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created BMP file...

OpenJPEG DoS

The vulnerability of the functions pinextpcrl, pinextcprl, and pinextrpcl in the lib/openjp3d/pi.c library, which is used for image encoding/decoding in OpenJPEG, is related to a bug that causes division by zero. Exploiting this vulnerability could allow an attacker to cause a service failure...