OpenJPEG Denial of Service Vulnerability (CNVD-2017-25671)

OpenJPEG is a C-based open source JPEG 2000 codec . A denial of service vulnerability exists in the 'opjtcdcodeblockencallocatedata' function in the lib/openjp2/tcd.c file in OpenJPEG version 2.2.0. A remote attacker could exploit this vulnerability to cause a denial of service heap buffer overfl...

PT-2017-13282

Name of the Vulnerable Software and Affected Versions OpenJPEG version 2.2.0 Description A heap-based buffer overflow issue was found due to an off-by-one error in the opj tcd code block enc allocate data function, potentially leading to remote denial of service or possibly remote code execution...