Arbitrary Code Execution

openjpeg is vulnerable to arbitrary code execution. A heap-based buffer-overflow write allows an attacker to execute arbitrary code on the host OS...

Denial Of Service (DoS)

libopenjpeg.so is vulnerable to denial of service. The vulnerability exists in opjdwtcalcexplicitstepsizes function of dwt.c due to buffer overflow which allows an attacker to crash the application via malicious input...

OpenJPEG Buffer Overflow Vulnerability (CNVD-2020-73760)

OpenJPEG is a C-based open source JPEG2000 codec . OpenJPEG suffers from a buffer overflow vulnerability that can be exploited by an attacker to trigger a buffer overflow via opjpinextrlcp to trigger a denial of service and potentially run code...

OpenJPEG Buffer Error Vulnerability

OpenJPEG is an open source C-based JPEG2000 codec. OpenJPEG suffers from a buffer error vulnerability that can be exploited by an attacker to trigger a buffer overflow via lib/openjp2/pi.c to trigger a denial of service and potentially run code...

OpenJPEG Buffer Error Vulnerability

OpenJPEG is an open source C-based JPEG2000 codec. OpenJPEG 2.4.0 suffers from a buffer error vulnerability, which originates from opjt2encodepacket.An attacker can exploit this vulnerability to force a read of an invalid address to trigger a denial of service, or to obtain sensitive information...

OpenJPEG Buffer Error Vulnerability

OpenJPEG is an open source C-based JPEG2000 codec. OpenJPEG suffers from a buffer error vulnerability that can be exploited by an attacker to trigger a denial of service by forcibly dereferencing a null pointer via the opjtgtreset function...

MGASA-2020-0464 Updated openjpeg2 packages fix security vulnerabilities

A heap-buffer overwrites error was discovered in lib/openjp2/mqc.c in OpenJPEG 2.3.1. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution CVE-2020-27814. A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker ...

[SECURITY] Fedora 33 Update: openjpeg2-2.3.1-9.fc33

The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...

OpenJPEG Buffer Error Vulnerability

OpenJPEG is an open source C-based JPEG2000 codec. OpenJPEG suffers from a buffer error vulnerability that originates from the fact that an attacker can exploit the vulnerability can trigger a buffer overflow via opj tcd dc level shift encode to trigger a denial of service and potentially run cod...

OpenJPEG Buffer Error Vulnerability

OpenJPEG is an open source C-based JPEG2000 codec. OpenJPEG suffers from a buffer error vulnerability that originates from the opjdwtcalcexplicitstepsizes function. An attacker could exploit this vulnerability could trigger a buffer overflow via opj dwt calculate OpenJPEG's explicit stepsizes to...

CVE-2020-27841

A flaw was found in OpenJPEG in src/lib/openjp2/pi.c. This flaw allows an attacker who can provide crafted input to be processed by the OpenJPEG encoder to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability. Mitigation This flaw could be mitigated if...

CVE-2020-27844

A flaw was found in openjpeg's src/lib/openjp2/t2.c. This flaw allows an attacker to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

CVE-2020-27842

A flaw was found in OpenJPEG’s t2 encoder. This flaw allows an attacker who can provide crafted input to be processed by OpenJPEG to cause a NULL pointer dereference issue. The highest threat to this vulnerability is to system availability...

CVE-2020-27845

A flaw was found in the src/lib/openjp2/pi.c function of OpenJPEG. This flaw allows an attacker who can provide untrusted input to OpenJPEG’s conversion/encoding functionality to cause an out-of-bounds read. The highest impact from this vulnerability is to system availability...

CVE-2020-27843

A flaw was found in OpenJPEG. This flaw allows an attacker to provide specially crafted input to the conversion or encoding functionality, causing an out-of-bounds read. The highest threat from this vulnerability is system availability...

CVE-2020-27824

A flaw was found in OpenJPEG’s encoder in the opjdwtcalcexplicitstepsizes function. This flaw allows an attacker who can supply crafted input to decomposition levels to cause a buffer overflow. The highest threat from this vulnerability is to system availability...

OpenJPEG Code Issue Vulnerability

OpenJPEG is an open source C-based JPEG2000 codec. A code issue vulnerability exists in OpenJPEG 2.3.1, which stems from a heap buffer overwrite error found in lib /openjp2/mqc.c, leading to out-of-bounds writes. An attacker could exploit this vulnerability to cause a remote denial of service or...

UBUNTU-CVE-2020-27824

A flaw was found in OpenJPEG’s encoder in the opjdwtcalcexplicitstepsizes function. This flaw allows an attacker who can supply crafted input to decomposition levels to cause a buffer overflow. The highest threat from this vulnerability is to system availability...

CVE-2020-27823

A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Mitigation This flaw can be mitigated by...

CVE-2020-27823

A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...