CVE-2020-6851

OpenJPEG through 2.3.1 has a heap-based buffer overflow in opjt1clbldecodeprocessor in openjp2/t1.c because of lack of opjj2kupdateimagedimensions validation...

CVE-2020-6851

OpenJPEG through 2.3.1 has a heap-based buffer overflow in opjt1clbldecodeprocessor in openjp2/t1.c because of lack of opjj2kupdateimagedimensions validation...

PT-2020-3208

Name of the Vulnerable Software and Affected Versions OpenJPEG versions prior to 2.3.2 Description The issue is related to a heap-based buffer overflow in the opj t1 clbl decode processor function in openjp2/t1.c due to a lack of opj j2k update image dimensions validation. This can lead to a deni...

OpenJPEG heap buffer overflow vulnerability (CNVD-2020-02456)

OpenJPEG is a C-based open source JPEG2000 codec . A buffer overflow vulnerability exists in the 'opjt1clbldecodeprocessor' function in the libopenjp2.so file in OpenJPEG 2.3.1 and earlier versions. The vulnerability stems from a networked system or product performing operations in memory without...

CVE-2020-6851: Out-of-bounds Write

OpenJPEG through 2.3.1 has a heap-based buffer overflow in opjt1clbldecodeprocessor in openjp2/t1.c because of lack of opjj2kupdateimagedimensions validation...

CVE-2018-5727

In OpenJPEG 2.3.0, there is an integer overflow vulnerability in the opjt1encodecblks function openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file...

Updated openjpeg2 packages fix security vulnerability

The updated packages fix a security vulnerability: In OpenJPEG 2.3.1, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616...

MGASA-2019-0365 Updated openjpeg2 packages fix security vulnerability

The updated packages fix a security vulnerability: In OpenJPEG 2.3.1, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616...

EulerOS 2.0 SP2 : openjpeg (EulerOS-SA-2019-2503)

According to the versions of the openjpeg package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - NULL pointer dereference vulnerabilities in the imagetopnm function in convert.c, sycc444torgb function in color.c, coloresycctorgb function in...

openjpeg:opj_decompress_fuzzer: Crash in opj_t2_decode_packets

Project: https://github.com/uclouvain/openjpeg.git https://github.com/uclouvain/openjpeg-data.git Detailed Report: https://oss-fuzz.com/testcase?key=5721361410686976 Project: openjpeg Fuzzing Engine: afl Fuzz Target: opjdecompressfuzzer Job Type: aflasanopenjpeg Platform Id: linux Crash Type:...

EulerOS 2.0 SP8 : openjpeg (EulerOS-SA-2019-2110)

According to the versions of the openjpeg package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via...

EulerOS 2.0 SP5 : openjpeg (EulerOS-SA-2019-2177)

According to the versions of the openjpeg package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via...

CVE-2018-5785

In OpenJPEG 2.3.0, there is an integer overflow caused by an out-of-bounds left shift in the opjj2ksetupencoder function openjp2/j2k.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file...

openjpeg2: Excessive iteration in openjp2/t1.c:opj_t1_encode_cblks can allow for denial of service via crafted BMP file

In OpenJPEG 2.3.0, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file...

AZL-44190 CVE-2019-17546 affecting package openjpeg2 2.3.1-12

tifgetimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a "Negative-size-param" condition...

CVE-2018-16376

An issue was discovered in OpenJPEG 2.3.0. A heap-based buffer overflow was discovered in the function t2encodepacket in lib/openmj2/t2.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly unspecified other impact...

CVE-2016-5159

An integer overflow, leading to a heap buffer overflow, was found in openjpeg, also affecting the PDF viewer in Chromium. A specially crafted JPEG2000 image could cause an incorrect calculation when allocating memory for code blocks, which could lead to a crash, or potentially, code execution...

openSUSE Security Update : ghostscript (openSUSE-2019-2222)

This update for ghostscript fixes the following issues : Security issues fixed : - CVE-2019-3835: Fixed an unauthorized file system access caused by an available superexec operator. bsc1129180 - CVE-2019-3839: Fixed an unauthorized file system access caused by available privileged operators...

CVE-2018-21010

A heap-based buffer overflow has been discovered in OpenJPEG in the function colorapplyiccprofile, while applying the color transformation. An application that uses OpenJPEG to parse untrusted images may be vulnerable to this flaw, which would allow an attacker to crash the application or...

SUSE SLED15 / SLES15 Security Update : ghostscript (SUSE-SU-2019:2460-1)

This update for ghostscript fixes the following issues : Security issues fixed : CVE-2019-3835: Fixed an unauthorized file system access caused by an available superexec operator. bsc1129180 CVE-2019-3839: Fixed an unauthorized file system access caused by available privileged operators. bsc11341...