openjpeg:opj_decompress_fuzzer_J2K: Use-of-uninitialized-value in opj_j2k_decode_tiles

Project: https://github.com/uclouvain/openjpeg.git https://github.com/uclouvain/openjpeg-data.git Detailed Report: https://oss-fuzz.com/testcase?key=5438904854446080 Project: openjpeg Fuzzing Engine: libFuzzer Fuzz Target: opjdecompressfuzzerJ2K Job Type: libfuzzermsanopenjpeg Platform Id: linux...

openjpeg:opj_decompress_fuzzer_J2K: Heap-buffer-overflow in opj_t1_allocate_buffers

Project: https://github.com/uclouvain/openjpeg.git https://github.com/uclouvain/openjpeg-data.git Detailed Report: https://oss-fuzz.com/testcase?key=4844474397753344 Project: openjpeg Fuzzing Engine: afl Fuzz Target: opjdecompressfuzzerJ2K Job Type: aflasanopenjpeg Platform Id: linux Crash Type:...

AZL-44643 CVE-2021-3575 affecting package openjpeg2 2.3.1-12

A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420torgb when decompressing a crafted .j2k file. An attacker could use this to execute arbitrary code with the permissions of the application compiled against openjpeg...