2382 matches found
CVE-2019-6988
An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service attempted excessive memory allocation in opjcalloc in openjp2/opjmalloc.c, when called from opjtcdinittile in openjp2/tcd.c, as demonstrated by the 64-bit opjdecompress...
CVE-2019-6988
CVE-2019-6988 affects OpenJPEG 2.3.0. The issue allows a remote attacker to trigger a denial of service via an attempted memory allocation failure in opj_calloc, called from opj_tcd_init_tile within openjp2/tcd.c during 64-bit opj_decompress. The underlying vulnerable code path is in openjp2/opj_...
PT-2019-18401
Name of the Vulnerable Software and Affected Versions OpenJPEG version 2.3.0 Description An issue in OpenJPEG allows remote attackers to cause a denial of service through attempted excessive memory allocation. This occurs in the opj calloc function in openjp2/opj malloc.c when called from opj tcd...
CVE-2019-6988: Allocation of Resources Without Limits or Throttling
An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service attempted excessive memory allocation in opjcalloc in openjp2/opjmalloc.c, when called from opjtcdinittile in openjp2/tcd.c, as demonstrated by the 64-bit opjdecompress...
Denial Of Service (DoS)
openjpeg is vulnerable to denial of service DoS attacks. The vulnerability exists through a heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted JPEG2000 file...
Denial Of Service (DoS)
openjpeg is vulnerable to denial of service. Insufficient memoory was allocated when encoding JPEG 2000 files from input images containing certain color depths. This allows a remote attacker to abuse the vulnerability to crash the application, or potentially execute arbitrary code on the system,...
Denial Of Service (DoS)
openjpeg is vulnerable to denial of service. A remote attacker is able to crash the process, or potentially execute arbitrary code in the context of the process worker, via a malicious OpenJPEG image to cause a heap-based buffer overflow...
Updated openjpeg2 packages fix security vulnerabilities
A stack-based buffer overflow in the pgxtoimage function in jpwl/convert.c could crash the converter CVE-2017-17479. A stack-based buffer overflow in the pgxtovolume function in jp3d/convert.c could crash the converter CVE-2017-17480. A flaw was found in OpenJPEG 2.3.0, there is an integer overfl...
MGASA-2019-0004 Updated openjpeg2 packages fix security vulnerabilities
A stack-based buffer overflow in the pgxtoimage function in jpwl/convert.c could crash the converter CVE-2017-17479. A stack-based buffer overflow in the pgxtovolume function in jp3d/convert.c could crash the converter CVE-2017-17480. A flaw was found in OpenJPEG 2.3.0, there is an integer overfl...
[SECURITY] Fedora 28 Update: openjpeg2-2.3.0-10.fc28
The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...
[SECURITY] Fedora 29 Update: openjpeg2-2.3.0-10.fc29
The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...
OpenJPEG Denial of Service Vulnerability (CNVD-2018-26010)
OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability exists in the 'imagetopnm' function in the jp2/convert.c file in OpenJPEG version 2.3.0. An attacker can exploit this vulnerability to cause a denial of service null pointer backreference...
[SECURITY] Fedora 28 Update: openjpeg2-2.3.0-9.fc28
The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...
[SECURITY] Fedora 27 Update: openjpeg2-2.3.0-9.fc27
The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...
Null pointer dereference
OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c...
ALPINE-CVE-2018-18088
OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c...
CVE-2018-18088
OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c...
CVE-2018-18088
OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c...
DEBIAN-CVE-2018-18088
OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c...
CVE-2018-18088
CVE-2018-18088 affects OpenJPEG 2.3.0 with a NULL pointer dereference in imagetopnm (jp2/convert.c). Impact: potential denial of service or crash. Public advisories from multiple vendors (Ubuntu USN-4109-1, Debian DSA-4405, SUSE SUSE-SU-2025-03352/03353, EulerOS) confirm the fix in later/OpenJPEG...