OpenJPEG Buffer Overflow Vulnerability (CNVD-2019-10143)

OpenJPEG is an open source JPEG 2000 codec written in C language. OpenJPEG 2.3.0 suffers from a heap buffer overflow vulnerability that originates from the program failing to check headerinfo.height and headerinfo.width in the 'pnmtoimage' function, which can be exploited by an attacker to execut...

CVE-2018-16375

An issue was discovered in OpenJPEG 2.3.0. Missing checks for headerinfo.height and headerinfo.width in the function pnmtoimage in bin/jpwl/convert.c can lead to a heap-based buffer overflow...

CVE-2018-16376

An issue was discovered in OpenJPEG 2.3.0. A heap-based buffer overflow was discovered in the function t2encodepacket in lib/openmj2/t2.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly unspecified other impact...

CVE-2018-16376

CVE-2018-16376 details: OpenJPEG 2.3.0 contains a heap-based buffer overflow in the function t2_encode_packet (lib/openmj2/t2.c), causing an out-of-bounds write. This can lead to remote denial of service or possibly other impact. Connected sources reference the CVE in multiple advisory/plugin rec...

CVE-2018-16375

CVE-2018-16375 affects OpenJPEG 2.3.0. The vulnerability is in bin/jpwl/convert.c (pnmtoimage) where missing checks for header_info.height and header_info.width can cause a heap-based buffer overflow. This is documented across multiple sources (OpenJPEG/OpenJPEG-related advisories) but no patch v...

OpenJPEG Buffer Overflow Vulnerability (CNVD-2019-10142)

OpenJPEG is an open source JPEG 2000 codec written in C language. A heap buffer overflow vulnerability exists in the t2encodepacket function in lib/openmj2/t2.c in OpenJPEG 2.3.0, which can be exploited by a remote attacker to cause a denial of service out-of-bounds write...

CVE-2018-16376

An issue was discovered in OpenJPEG 2.3.0. A heap-based buffer overflow was discovered in the function t2encodepacket in lib/openmj2/t2.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly unspecified other impact...

AZL-45063 CVE-2018-15209 affecting package openjpeg2 2.3.1-12

ChopUpSingleUncompressedStrip in tifdirread.c in LibTIFF 4.0.9 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted TIFF file, as demonstrated by tiff2pdf...

DEBIAN-CVE-2016-9580

An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow...

Integer overflow

An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow...

CVE-2016-9580

An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow...

CVE-2016-9572

A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error in the code responsible for decoding the input image, an application using openjpeg to process image data could crash when processing a crafted image...

ALPINE-CVE-2016-9580

An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow...

Null pointer dereference

A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error in the code responsible for decoding the input image, an application using openjpeg to process image data could crash when processing a crafted image...

DEBIAN-CVE-2016-9572

A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error in the code responsible for decoding the input image, an application using openjpeg to process image data could crash when processing a crafted image...

CVE-2016-9572

A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error in the code responsible for decoding the input image, an application using openjpeg to process image data could crash when processing a crafted image...

CVE-2016-9580

An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow...

CVE-2016-9572

A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error in the code responsible for decoding the input image, an application using openjpeg to process image data could crash when processing a crafted image...

UBUNTU-CVE-2016-9580

An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow...

UBUNTU-CVE-2016-9572

A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error in the code responsible for decoding the input image, an application using openjpeg to process image data could crash when processing a crafted image...