OpenJPEG: Multiple vulnerabilities

Background OpenJPEG is an open-source JPEG 2000 library. Description Multiple vulnerabilities have been discovered in OpenJPEG. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround ...

GLSA-202101-29 : OpenJPEG: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202101-29 OpenJPEG: Multiple vulnerabilities Multiple vulnerabilities have been discovered in OpenJPEG. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

Fedora: Security Advisory for openjpeg2 (FEDORA-2020-d32853a28d)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PT-2021-27422

Name of the Vulnerable Software and Affected Versions: OpenJPEG affected versions not specified Description: The issue is related to a heap-buffer-overflow read. Technical details about the crash include the opj dwt decode partial tile function, opj tcd dwt decode function, and opj tcd decode til...

PT-2021-27416

Name of the Vulnerable Software and Affected Versions: OpenJPEG affected versions not specified Description: The issue is related to a heap-buffer-overflow read, which can cause a crash. The crash occurs in the opj tcd mct decode function, specifically when decoding tiles in the opj tcd decode ti...

PT-2021-27427

Name of the Vulnerable Software and Affected Versions: OpenJPEG affected versions not specified Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the opj dwt interleave partial v, opj dwt decode partial tile, and opj tcd dwt decode...

Denial Of Service (DoS)

OpenJPEG is vulnerable to denial of service. A heap-based buffer overflow in opjt1clbldecodeprocessor in openjp2/t1.c due to lack of opjj2kupdateimagedimensions validation allows an attacker to crash the application...

Denial Of Service (DoS)

ghostscript is vulnerable to denial of service. The vulnerability exists through a flaw in src/lib/openjp2/pi.c through openjpeg's conversion/encoding functionality that causes an out-of-bounds read...

Integer Overflow

OpenJPEG is vulnerable to interger overflow. An attacker may send a malicious bmp file causing an integer overflow in the opjt1encodecblks function openjp2/t1.c causing a denial of service...

Denial Of Service (DoS)

ghostscript is vulnerable to denial of service. The vulnerability exists through in src/lib/openjp2/pi.c, as the openjpeg encoder could cause an out-of-bounds read...

Denial Of Service (DoS)

openjpeg is vulnerable to denial of service. The vulnerability exists in opjt2encodepacket function of t2.c due to a null pointer dereference which allows an attacker to crash the application via malicious input...

USN-4685-1 openjpeg2 vulnerabilities

It was discovered that OpenJPEG incorrectly handled certain image data. An attacker could use this issue to cause OpenJPEG to crash, leading to a denial of service, or possibly execute arbitrary code...

USN-4685-1: OpenJPEG vulnerabilities

It was discovered that OpenJPEG incorrectly handled certain image data. An attacker could use this issue to cause OpenJPEG to crash, leading to a denial of service, or possibly execute arbitrary code...

Ubuntu 20.04 LTS : OpenJPEG vulnerabilities (USN-4685-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4685-1 advisory. It was discovered that OpenJPEG incorrectly handled certain image data. An attacker could use this issue to cause OpenJPEG to crash, leading to a denial ...

OpenJPEG heap buffer overflow vulnerability (CNVD-2021-02037)

OpenJPEG is an open source JPEG 2000 codec written in C language . A heap buffer overflow vulnerability exists in the opjt2encodepacket function in openjp2/t2.c in versions of OpenJPEG prior to 2.4.0. An attacker could exploit this vulnerability via specially crafted input to affect...

ALPINE-CVE-2020-27844

A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows an attacker to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, as well as...

DEBIAN-CVE-2020-27843

A flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted input to the conversion or encoding functionality, causing an out-of-bounds read. The highest threat from this vulnerability is system availability...

DEBIAN-CVE-2020-27845

There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability...

CVE-2020-27843

A flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted input to the conversion or encoding functionality, causing an out-of-bounds read. The highest threat from this vulnerability is system availability...

CVE-2020-27844

A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows an attacker to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, as well as...