Updated openjpeg2 packages fix security vulnerabilities

A NULL pointer dereference flaw was found in the way openjpeg decoded certain input images. Due to a logic error in the code responsible for decoding the input image, an application using openjpeg to process image data could crash when processing a crafted image CVE-2016-9572. A heap buffer...

PT-2018-5097 · Openjpeg +3 · Openjpeg +3

Name of the Vulnerable Software and Affected Versions: openjpeg version 2.1.2 Description: An integer overflow issue was discovered in the tiftoimage function, leading to a heap buffer overflow. Recommendations: For openjpeg version 2.1.2, at the moment, there is no information about a newer...

PT-2018-5098 · Openjpeg +3 · Openjpeg +3

Name of the Vulnerable Software and Affected Versions: openjpeg version 2.1.2 Description: A heap buffer overflow issue was discovered due to an infinite loop vulnerability in the tiftoimage component of openjpeg, specifically affecting the convert 32s C1P1 function. Recommendations: For openjpeg...

PT-2018-5094 · Openjpeg +4 · Openjpeg +4

Name of the Vulnerable Software and Affected Versions: OpenJPEG version 2.1.2 Description: An out-of-bounds read issue was found in the j2k to image tool. Converting a specially crafted JPEG2000 file to another format could cause the application to crash or, potentially, disclose some data from t...

PT-2018-5093 · Openjpeg +2 · Openjpeg +2

Name of the Vulnerable Software and Affected Versions: openjpeg version 2.1.2 Description: A NULL pointer dereference flaw was found in the way openjpeg decoded certain input images. This issue is caused by a logic error in the code responsible for decoding the input image. As a result, an...

CVE-2016-9675

openjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045. A crafted j2k image could cause the application to crash, or potentially execute arbitrary code...

CVE-2016-9675

openjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045. A crafted j2k image could cause the application to crash, or potentially execute arbitrary code...

CVE-2016-9675

openjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045. A crafted j2k image could cause the application to crash, or potentially execute arbitrary code...

UBUNTU-CVE-2016-9675

openjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045. A crafted j2k image could cause the application to crash, or potentially execute arbitrary code...

Heap overflow

openjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045. A crafted j2k image could cause the application to crash, or potentially execute arbitrary code...

CVE-2016-9675

openjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045. A crafted j2k image could cause the application to crash, or potentially execute arbitrary code...

CVE-2016-9675

OpenJPEG vulnerability CVE-2016-9675 is a heap-based buffer overflow found in the patch for CVE-2013-6045. A crafted JPEG2000 (j2k) image could crash the application or potentially allow arbitrary code execution. The issue affects OpenJPEG releases around that era (notably 1.3 and 1.5.1 in some a...

PT-2016-7810 · Openjpeg +3 · Openjpeg +3

Name of the Vulnerable Software and Affected Versions: openjpeg affected versions not specified Description: A heap-based buffer overflow flaw was found in the patch for a previous issue. A crafted j2k image could cause the application to crash, or potentially execute arbitrary code...

[SECURITY] Fedora 25 Update: openjpeg2-2.1.2-3.fc25

The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...

CVE-2016-9581

An infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert32sC1P1 was found in openjpeg 2.1.2...

CVE-2016-9580

An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow...

OpenJPEG heap buffer overflow vulnerability (CNVD-2016-12659)

OpenJPEG is a C-based open source JPEG 2000 codec . A heap buffer overflow vulnerability exists in OpenJPEG version 2.1.2. An attacker can exploit this vulnerability to execute arbitrary code...

OpenJPEG heap buffer overflow vulnerability (CNVD-2016-12658)

OpenJPEG is a C-based open source JPEG 2000 codec . A heap buffer overflow vulnerability exists in OpenJPEG version 2.1.2. An attacker can exploit this vulnerability to execute arbitrary code...

[SECURITY] Fedora 24 Update: openjpeg2-2.1.2-2.fc24

The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...

[SECURITY] Fedora 25 Update: openjpeg2-2.1.2-2.fc25

The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...