232 matches found
PT-2025-3337 · Openjpeg +6 · Openjpeg +6
Name of the Vulnerable Software and Affected Versions: OpenJPEG affected versions not specified Description: A flaw was found in the OpenJPEG project, where a heap buffer overflow condition may be triggered when certain options are specified while using the opj decompress utility. This can lead t...
The vulnerability of the OpenJPEG library for image encoding and decoding, related to uncontrolled resource consumption, allows a perpetrator to cause a service failure.
The vulnerability of the OpenJPEG library for image encoding and decoding is related to uncontrolled resource consumption. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created file...
USN-7037-1: OpenJPEG vulnerability
It was discovered that OpenJPEG could enter a large loop and continuously print warning messages when given specially crafted input. An attacker could potentially use this issue to cause a denial of service...
There's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker is able to provide crafted input to be processed by the openjpeg encoder this could cause an out-of-bounds read. The greatest impact from this flaw is to application availability.
...
UBUNTU-CVE-2023-39329
A flaw was found in OpenJPEG. A resource exhaustion can occur in the opjt1decodecblks function in tcd.c through a crafted image file, causing a denial of service...
AZL-43657 CVE-2023-39328 affecting package openjpeg2 2.3.1-12
A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file...
DEBIAN-CVE-2023-39328
A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file...
UBUNTU-CVE-2023-39328
A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file...
The vulnerability in the opj2_decompress program of the OpenJPEG library allows a attacker to cause a service failure.
The vulnerability of the opj2decompress program in the OpenJPEG image encoding and decoding library is related to improper handling of directories containing a large number of files. Exploiting this vulnerability allows an attacker to cause service interruptions...
PT-2024-12803
Name of the Vulnerable Software and Affected Versions OpenJPEG affected versions not specified Description A flaw was found in OpenJPEG where maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal. This issue might caus...
PT-2023-35853 · Openjpeg · Openjpeg
Name of the Vulnerable Software and Affected Versions: OpenJPEG affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash occurs in the opj jp2 apply pclr and opj jp2 decode functions, which are part of the...
SUSE CVE-2013-6052
OpenJPEG 1.3 and earlier allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read...
SUSE CVE-2014-7945
OpenJPEG before r2908, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service out-of-bounds read via a crafted PDF document, related to j2k.c, jp2.c, and t2.c...
SUSE CVE-2015-6581
Double free vulnerability in the opjj2kcopydefaulttcpandcreatetcd function in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 45.0.2454.85, allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption by triggering a...
SUSE CVE-2016-1924
The opjtgtreset function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG 2000 image...
SUSE CVE-2016-1923
Heap-based buffer overflow in the opjj2kupdateimagedata function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG 2000 image...
SUSE CVE-2016-4797
Divide-by-zero vulnerability in the opjtcdinittile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service application crash via a crafted jp2 file. NOTE: this issue exists because of an incorrect fix for CVE-2014-7947...
SUSE CVE-2016-4796
Heap-based buffer overflow in the colorcmyktorgb in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service crash via a crafted .j2k file...
SUSE CVE-2016-9572
A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error in the code responsible for decoding the input image, an application using openjpeg to process image data could crash when processing a crafted image...