CVE-2016-9573

An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2ktoimage tool. Converting a specially crafted JPEG2000 file to another format could cause the application to crash or, potentially, disclose some data from the heap...

CVE-2016-9573

CVE-2016-9573 is an out-of-bounds read in OpenJPEG 2.1.2 (j2k_to_image tool). A crafted JPEG2000 file could crash the app or potentially disclose heap data. No exploitation details are provided in the documents. Remediation guidance across connected sources indicates upgrading OpenJPEG (e.g., to ...

CVE-2016-9573

An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2ktoimage tool. Converting a specially crafted JPEG2000 file to another format could cause the application to crash or, potentially, disclose some data from the heap...

FreeBSD : OpenJPEG -- multiple vulnerabilities (11dc3890-0e64-11e8-99b0-d017c2987f9a)

OpenJPEG reports : Multiple vulnerabilities have been found in OpenJPEG, the opensource JPEG 2000 codec. Please consult the CVE list for further details. CVE-2017-17479 and CVE-2017-17480 were fixed in r477112. CVE-2018-5785 was fixed in r480624. CVE-2018-6616 was fixed in r489415. C Tenable...

OpenJPEG De-Zero Vulnerability

OpenJPEG is an open source JPEG 2000 codec written in C language. A divide-by-zero vulnerability exists in the pinextpcrl, pinextcprl, and pinextrpcl functions in lib/openjp3d/pi.c in OpenJPEG 2.3.0 and earlier versions, which can be exploited by remote attackers to cause a denial of service...

CVE-2018-14423

Division-by-zero vulnerabilities in the functions pinextpcrl, pinextcprl, and pinextrpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service application crash...

CVE-2018-14423

Division-by-zero vulnerabilities in the functions pinextpcrl, pinextcprl, and pinextrpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service application crash...

ALPINE-CVE-2018-14423

Division-by-zero vulnerabilities in the functions pinextpcrl, pinextcprl, and pinextrpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service application crash...

DEBIAN-CVE-2018-14423

Division-by-zero vulnerabilities in the functions pinextpcrl, pinextcprl, and pinextrpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service application crash...

CVE-2018-14423

Division-by-zero vulnerabilities in the functions pinextpcrl, pinextcprl, and pinextrpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service application crash...

CVE-2018-14423

CVE-2018-14423 affects the OpenJPEG project, specifically the function pi_next_pcrl/pi_next_cprl/pi_next_rpcl in lib/openjp3d/pi.c. The vulnerability is a division-by-zero in OpenJPEG up to version 2.3.0, which can allow remote attackers to cause an application crash (DoS) via crafted input. Conn...

CVE-2018-14423

Division-by-zero vulnerabilities in the functions pinextpcrl, pinextcprl, and pinextrpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service application crash...

CVE-2018-14423

Division-by-zero vulnerabilities in the functions pinextpcrl, pinextcprl, and pinextrpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service application crash...

CVE-2018-14423

Division-by-zero vulnerabilities in the functions pinextpcrl, pinextcprl, and pinextrpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service application crash...

UBUNTU-CVE-2018-14423

Division-by-zero vulnerabilities in the functions pinextpcrl, pinextcprl, and pinextrpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service application crash...

EulerOS 2.0 SP3 : openjpeg (EulerOS-SA-2018-1157)

According to the version of the openjpeg package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in mj2/opjmj2extract.c in OpenJPEG 2.3.0. The output prefix was not checked for length, which could overflow a buffer, whe...

Security Bulletin: Vulnerabilities in openjpeg affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in openjpeg. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-5139 DESCRIPTION: Google Chrome is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by pdfium. By persuading a victim to...

EulerOS 2.0 SP2 : openjpeg (EulerOS-SA-2018-1095)

According to the version of the openjpeg package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in mj2/opjmj2extract.c in OpenJPEG 2.3.0. The output prefix was not checked for length, which could overflow a buffer, whe...

EulerOS 2.0 SP1 : openjpeg (EulerOS-SA-2018-1094)

According to the version of the openjpeg package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in mj2/opjmj2extract.c in OpenJPEG 2.3.0. The output prefix was not checked for length, which could overflow a buffer, whe...

CVE-2014-0158

Heap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1.5.2 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file because of incorrect j2kdecode, j2kreadeoc, and tcddecodetile interaction, a...