CVE-2019-12214

In FreeImage 3.18.0, an out-of-bounds access occurs because of mishandling of the OpenJPEG j2kreadppmv3 function in j2k.c. The value of lNppm comes from the file read in, and the code does not consider that lNppm may be greater than the size of pheaderdata...

CVE-2019-12214

In FreeImage 3.18.0, an out-of-bounds access occurs because of mishandling of the OpenJPEG j2kreadppmv3 function in j2k.c. The value of lNppm comes from the file read in, and the code does not consider that lNppm may be greater than the size of pheaderdata...

CVE-2018-14423

Division-by-zero vulnerabilities in the functions pinextpcrl, pinextcprl, and pinextrpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service application crash...

CVE-2018-18088

OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c...

Denial Of Service (DoS)

OpenJPEG is vulnerable to denial of service attacks. A remote unauthenticated attacker could exploit the vulnerable PDFium component to cause denial of service conditions via crafted JPEG 2000 data. Affected function is opjtcdinittile in the file tcd.c...

Denial Of Service (DoS)

OpenJPEG is vulnerable to denial of service attacks. A remote unauthenticated attacker could exploit the vulnerable PDFium component to cause denial of service conditions via crafted JPEG 2000 data that is mishandled during opjalignedmalloc calls in dwt.c and t1.c...

Arbitrary Code Execution And Denial Of Service

OpenJPEG is vulnerable to arbitrary code execution and denial of service attacks. A remote unauthenticated attacker could cause application crash or potential code execution due to a heap-based buffer overflow flaw via a specifically crafted j2k image...

Arbitrary Code Execution

OpenJPEG is vulnerable to arbitrary code execution attacks. A remote unauthenticated attacker could exploit the vulnerable JP2 File Handler component to cause code execution via a crafted JP2 file, which triggers an out-of-bounds read or write...

Heap-based Buffer Overflow

OpenJPEG is vulnerable to Heap-based Buffer Overflow. An attacker could create a specially crafted OpenJPEG image that, when opened, could cause an application using openjpeg to crash or, possibly, execute arbitrary code with the privileges of the user running the application...

Heap-based Buffer Over-read

OpenJPEG is an open source library for reading and writing image files in JPEG 2000 format. Multiple heap-based buffer overflow flaws were found in OpenJPEG. An attacker could create a specially crafted OpenJPEG image that, when opened, could cause an application using openjpeg to crash or,...

Heap-based Buffer Over-read

OpenJPEG is an open source library for reading and writing image files in JPEG 2000 format. Multiple heap-based buffer overflow flaws were found in OpenJPEG. An attacker could create a specially crafted OpenJPEG image that, when opened, could cause an application using openjpeg to crash or,...

Denial Of Service (DoS) And Remote Code Execution (RCE)

OpenJPEG is an open source library for reading and writing image files in JPEG 2000 format. An input validation flaw, leading to a heap-based buffer overflow, was found in the way OpenJPEG handled the tile number and size in an image tile header. A remote attacker could provide a specially-crafte...

The vulnerability of the pgxtovolume function in the OpenJPEG library, related to writing beyond the buffer boundaries, allows a attacker to cause a service failure and execute arbitrary code.

The vulnerability of the pgxtovolume function jp3d/convert.c in the OpenJPEG image encoding/decoding library is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause service interruptions and execute arbitrary code...

The vulnerability of the opj_j2k_setup_encoder function in the OpenJPEG image encoding and decoding library, related to integer overflow caused by left shift operations, allows attackers to cause service failures.

The vulnerability of the opjj2ksetupencoder function in the OpenJPEG image encoding and decoding library is related to a numerical overflow caused by a left shift operation. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created BMP file...

The vulnerabilities of the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in the OpenJPEG image encoding/decoding library allow a malicious actor to cause a service failure.

The vulnerability of the functions pinextpcrl, pinextcprl, and pinextrpcl in the lib/openjp3d/pi.c library, which is used for image encoding/decoding in OpenJPEG, is related to a bug that causes division by zero. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the imagetopnm function in the OpenJPEG library, related to the swapping of the null pointer, allows attackers to cause a service failure.

The vulnerability of the imagetopnm function in the OpenJPEG image encoding and decoding library is related to the use of a null pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of the opj_t1_encode_cblks function in the OpenJPEG image encoding and decoding library, related to a bug that leads to an infinite loop, allows attackers to cause service interruptions.

The vulnerability of the opjt1encodecblks function in the OpenJPEG image encoding and decoding library is related to an error that causes an infinite loop. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using a specially created BMP file...

CVE-2018-6616

In OpenJPEG 2.3.0, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file...

Slackware 14.2 / current : openjpeg (SSA:2019-095-01)

New openjpeg packages are available for Slackware 14.2 and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2019-095-01. The text itself is copyright C Slackware Linux, Inc...

[slackware-security] openjpeg

New openjpeg packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/openjpeg-2.3.1-i586-1slack14.2.txz: Upgraded. Includes many bug fixes including security fixes. Security fix Where to find the new...