CVE-2021-29338

Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service DoS. This occurs when the attacker uses the command line option "-ImgDir" on a directory that contains 1048576 files...

CVE-2021-29338

CVE-2021-29338 is an OpenJPEG 2.4.0 vulnerability: an integer overflow in the OpenJPEG library (openjp2/pi.c / related code paths) can be triggered by a directory with a very large number of files (example: 1,048,576) passed via the -ImgDir option, leading to a denial of service (crash). The issu...

CVE-2021-29338

Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service DoS. This occurs when the attacker uses the command line option "-ImgDir" on a directory that contains 1048576 files...

CVE-2021-29338

Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service DoS. This occurs when the attacker uses the command line option "-ImgDir" on a directory that contains 1048576 files...

OpenJPEG 输入验证错误漏洞

OpenJPEG is an open source JPEG 2000 codec written in C language . An integer overflow vulnerability exists in OpenJPEG version v2.4.0. An attacker can exploit the vulnerability by using the command line option "-ImgDir" on a directory containing 1048576 files to crash the program...

PT-2021-7386 · Openjpeg +11 · Openjpeg +11

Name of the Vulnerable Software and Affected Versions: OpenJPEG version 2.4.0 Description: The issue is related to an integer overflow in OpenJPEG, which can be triggered by a remote attacker using the command line option "-ImgDir" on a directory containing a large number of files, specifically...

Huawei EulerOS: Security Advisory for openjpeg (EulerOS-SA-2021-1692)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : openjpeg (EulerOS-SA-2021-1692)

According to the version of the openjpeg package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in OpenJPEG 2.3.0. Missing checks for headerinfo.height and headerinfo.width in the function pnmtoimage in...

Ubuntu 16.04 LTS : OpenJPEG vulnerabilities (USN-4880-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4880-1 advisory. It was discovered that OpenJPEG incorrectly handled certain image data. An attacker could use this issue to cause OpenJPEG to crash, leading to a denial ...

USN-4782-1: OpenJPEG vulnerabilities

It was discovered that OpenJPEG incorrectly handled certain image files. A remote attacker could possibly use this issue to cause a denial of service. CVE-2016-10506 and CVE-2017-12982 affected only Ubuntu 16.04 ESM. CVE-2018-16375, CVE-2018-20845 and CVE-2019-12973 affected only Ubuntu 18.04 ESM...

USN-4880-1 openjpeg2 vulnerabilities

It was discovered that OpenJPEG incorrectly handled certain image data. An attacker could use this issue to cause OpenJPEG to crash, leading to a denial of service, or possibly execute arbitrary code...

USN-4880-1: OpenJPEG vulnerabilities

It was discovered that OpenJPEG incorrectly handled certain image data. An attacker could use this issue to cause OpenJPEG to crash, leading to a denial of service, or possibly execute arbitrary code...

The vulnerability of the OpenJPEG library for image encoding and decoding, related to the lack of zero-division checking, allows attackers to trigger a service failure.

The vulnerability of the OpenJPEG library for image encoding and decoding is related to division by zero. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability of the color_apply_icc_profile function (bin/common/color.c) in the OpenJPEG encoding and decoding library allows a malicious actor to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the colorapplyiccprofile function in the OpenJPEG encoding and decoding library is related to the output of the operation within acceptable buffer data limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity,...

The vulnerability of the opj_get_encoding_parameters function (openjp2/pi.c) in the OpenJPEG encoding and decoding library allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the opjgetencodingparameters function openjp2/pi.c in the OpenJPEG encoding and decoding library is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and cause service failur...

The vulnerability of the OpenJPEG library for image encoding and decoding, which arises due to insufficient validation of input data, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the src/lib/openjp2/t2.c file of the OpenJPEG image encoding and decoding library exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the opj_t1_encode_cblks function in the OpenJPEG encoding and decoding library allows a attacker to cause a service failure.

The vulnerability of the opjt1encodecblks function in the OpenJPEG encoding and decoding library is related to excessive iteration. Exploiting this vulnerability may allow a malicious actor to cause service failures...

Out-of-Bounds Access

openjpeg is vulnerable to out-of-bounds write. An attacker is able to inject a malicious input during conversion and encoding, causing an out-of-bounds write...

AZL-44196 CVE-2020-35523 affecting package openjpeg2 2.3.1-12

An integer overflow flaw was found in libtiff that exists in the tifgetimage.c file. This flaw allows an attacker to inject and execute arbitrary code when a user opens a crafted TIFF file. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

Microsoft Edge (Chromium) < 89.0.774.45 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 89.0.774.45. It is, therefore, affected by multiple vulnerabilities as referenced in the March 4, 2021 advisory. - A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows an...