CVE-2017-2812

A code execution vulnerability exists in the kdubufferedexpand function of the Kakadu SDK 7.9. A specially crafted JPEG 2000 file can be read by the program and can lead to an out of bounds write causing an exploitable condition to arise...

CVE-2017-2812

CVE-2017-2812 — Kakadu SDK 7.9 Contiguous Codestream Code Execution A vulnerability exists in the Kakadu SDK (kdu_buffered_expand) where the contiguous codestream size is not checked, leading to excessive parsing and an out-of-bounds write. The issue arises during JPEG 2000 image processing and c...

Kakadu SDK JPEG 2000 Contiguous Codestream Code Execution Vulnerability(CVE-2017-2812)

Summary A code execution vulnerability exists in the kdubufferedexpand function of the Kakadu SDK 7.9. A specially crafted JPEG 2000 file can be read by the program and can lead to an out of bounds write causing an exploitable condition to arise. Tested Versions Kakadu SDK 7.9 - OSX & Linux Produ...