CVE-2016-10506

Division-by-zero vulnerabilities in the functions opjpinextcprl, opjpinextpcrl, and opjpinextrpcl in pi.c in OpenJPEG before 2.2.0 allow remote attackers to cause a denial of service application crash via crafted j2k files...

OpenJPEG integer overflow vulnerability (CNVD-2017-27281)

OpenJPEG is a C-based open source JPEG 2000 codec . An integer overflow vulnerability exists in the opjcompress component of OpenJPEG, which could be exploited by a remote attacker to conduct a denial of service attack or remotely execute arbitrary code by constructing a specially crafted BMP ima...

OpenJPEG Denial of Service Vulnerability (CNVD-2017-27280)

OpenJPEG is a C-based open source JPEG 2000 codec . A denial of service vulnerability exists in the opjdecompress component of OpenJPEG, which could be exploited by a remote attacker to conduct a denial of service attack or remotely execute arbitrary code by constructing a specially crafted J2K...

OpenJPEG Heap Overflow Vulnerability

OpenJPEG is a C-based open source JPEG 2000 codec . A heap overflow vulnerability exists in the opjcompress component of OpenJPEG, which could be exploited by a remote attacker to conduct a denial of service attack or remotely execute arbitrary code by constructing a specially crafted BMP image...

CVE-2016-10505: NULL Pointer Dereference

NULL pointer dereference vulnerabilities in the imagetopnm function in convert.c, sycc444torgb function in color.c, coloresycctorgb function in color.c, and sycc422torgb function in color.c in OpenJPEG before 2.2.0 allow remote attackers to cause a denial of service application crash via crafted...

PT-2017-13221

Name of the Vulnerable Software and Affected Versions OpenJPEG version 2.2.0 Description A stack-based buffer overflow was discovered in the pgxtoimage function in bin/jp2/convert.c. This issue causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code...

CVE-2017-14041: Out-of-bounds Write

A stack-based buffer overflow was discovered in the pgxtoimage function in bin/jp2/convert.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution...

CVE-2017-14040: Out-of-bounds Write

An invalid write access was discovered in bin/jp2/convert.c in OpenJPEG 2.2.0, triggering a crash in the tgatoimage function. The vulnerability may lead to remote denial of service or possibly unspecified other impact...

CVE-2016-10504: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow vulnerability in the opjmqcbyteout function in mqc.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service application crash via a crafted bmp file...

PT-2017-13219

Name of the Vulnerable Software and Affected Versions OpenJPEG version 2.2.0 Description A heap-based buffer overflow was discovered in the opj t2 encode packet function, causing an out-of-bounds write. This may lead to remote denial of service or possibly other unspecified impact. Recommendation...

PT-2017-13220

Name of the Vulnerable Software and Affected Versions OpenJPEG version 2.2.0 Description The issue is related to an invalid write access in the bin/jp2/convert.c file, which triggers a crash in the tgatoimage function. This may lead to a denial of service or possibly other unspecified impacts...

CVE-2016-10506: Divide By Zero

Division-by-zero vulnerabilities in the functions opjpinextcprl, opjpinextpcrl, and opjpinextrpcl in pi.c in OpenJPEG before 2.2.0 allow remote attackers to cause a denial of service application crash via crafted j2k files...

CVE-2017-14039: Out-of-bounds Write

A heap-based buffer overflow was discovered in the opjt2encodepacket function in lib/openjp2/t2.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly unspecified other impact...

OpenJPEG Denial of Service Vulnerability (CNVD-2017-27279)

OpenJPEG is a C-based open source JPEG 2000 codec . A denial of service vulnerability exists in the opjdecompress component of OpenJPEG, which could be exploited by a remote attacker to conduct a denial of service attack or remotely execute arbitrary code by constructing a specially crafted J2k...

CVE-2016-10507: Integer Overflow or Wraparound

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted bmp file...

openjpeg: Heap-buffer-overflow in opj_dwt_decode_partial_tile

Project: https://github.com/uclouvain/openjpeg.git https://github.com/uclouvain/openjpeg-data.git Detailed report: https://oss-fuzz.com/testcase?key=4591818438082560 Project: openjpeg Fuzzer: libFuzzeropenjpegopjdecompressfuzzer Fuzz target binary: opjdecompressfuzzer Job Type:...

openjpeg: Heap-buffer-overflow in opj_dwt_interleave_partial_v

Project: https://github.com/uclouvain/openjpeg.git https://github.com/uclouvain/openjpeg-data.git Detailed report: https://oss-fuzz.com/testcase?key=4717233764827136 Project: openjpeg Fuzzer: libFuzzeropenjpegopjdecompressfuzzer Fuzz target binary: opjdecompressfuzzer Job Type:...

OpenJPEG Denial of Service Vulnerability (CNVD-2017-28761)

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability exists in the 'bmpreadinfoheader' function in bin/jp2/convertbmp.c in OpenJPEG version 2.2.0, which originates from the program receiving a packet header with a biBitCount of zero. A remote attacker could use this...

UBUNTU-CVE-2017-12982

The bmpreadinfoheader function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which allows remote attackers to cause a denial of service memory allocation failure in the opjimagecreate function in lib/openjp2/image.c, related to the opjalignedallocn...

Design/Logic Flaw

The bmpreadinfoheader function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which allows remote attackers to cause a denial of service memory allocation failure in the opjimagecreate function in lib/openjp2/image.c, related to the opjalignedallocn...