Debian DLA-2277-1 : openjpeg2 security update

The following CVEs were reported against src:openjpeg2. CVE-2019-12973 In OpenJPEG 2.3.1, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to...

CVE-2020-15389

jp2/opjdecompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a double-free may also be possible. This is related to calling opjimagedestroy twice...

OpenJPEG Resource Management Error Vulnerability (CNVD-2021-22130)

OpenJPEG is a C-based open source JPEG2000 codec . A resource management error vulnerability exists in the jp2/opjdecompress.c file in OpenJPEG 2.3.1 and earlier versions. The vulnerability arises from mismanagement of system resources e.g., memory, disk space, files, etc. by a networked system o...

CVE-2020-15389

jp2/opjdecompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a double-free may also be possible. This is related to calling opjimagedestroy twice...

DEBIAN-CVE-2020-15389

jp2/opjdecompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a double-free may also be possible. This is related to calling opjimagedestroy twice...

AZL-44193 CVE-2020-15389 affecting package openjpeg2 2.3.1-12

jp2/opjdecompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a double-free may also be possible. This is related to calling opjimagedestroy twice...

CVE-2020-15389

jp2/opjdecompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a double-free may also be possible. This is related to calling opjimagedestroy twice...

ALPINE-CVE-2020-15389

jp2/opjdecompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a double-free may also be possible. This is related to calling opjimagedestroy twice...

CVE-2020-15389

jp2/opjdecompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a double-free may also be possible. This is related to calling opjimagedestroy twice...

Double free

jp2/opjdecompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a double-free may also be possible. This is related to calling opjimagedestroy twice...

UBUNTU-CVE-2020-15389

jp2/opjdecompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a double-free may also be possible. This is related to calling opjimagedestroy twice...

CVE-2020-15389

jp2/opjdecompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a double-free may also be possible. This is related to calling opjimagedestroy twice...

CVE-2020-15389

jp2/opjdecompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a double-free may also be possible. This is related to calling opjimagedestroy twice...

CVE-2020-15389

OpenJPEG up to 2.3.1 is affected by CVE-2020-15389: a use-after-free (and possible double-free) in jp2/opj_decompress.c when a directory contains a mix of valid and invalid files processed by the decompressor. The issue can crash the application or enable memory corruption; it is fixed in OpenJPE...

CVE-2020-15389

jp2/opjdecompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a double-free may also be possible. This is related to calling opjimagedestroy twice...

PT-2020-4486 · Openjpeg +9 · Openjpeg +9

Name of the Vulnerable Software and Affected Versions: OpenJPEG versions through 2.3.1 Description: The issue is related to a use-after-free in the jp2/opj decompress.c component of the OpenJPEG library, which can be triggered by a mix of valid and invalid files in a directory operated on by the...

The vulnerability of the opj_t1_clbl_decode_processor function (openjp2/t1.c) in the OpenJPEG image encoding and decoding library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the opjt1clbldecodeprocessor function in the OpenJPEG image encoding and decoding library is related to writing beyond the buffer boundaries in memory when qmfbid == 1. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Remote Code Execution

openjpeg is vulnerable to remote code execution. The vulnerability exists as a mishandled zero case was discovered in opjj2ksetcinemaparameters in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service heap-based buffer...

Remote Code Execution

openjpeg is vulnerable to remote code execution. The vulnerability exists as a size-validation issue was discovered in opjj2kwritesot in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service heap-based buffer overflow...

Denial Of Service (DoS)

openjpeg is vulnerable to denial of service DoS. The vulnerability exists as the bmpreadinfoheader function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which allows remote attackers to cause a denial of service memory allocation failure in the...