CVE-2018-21010

OpenJPEG is affected by CVE-2018-21010: a heap buffer overflow in color_apply_icc_profile (bin/common/color.c) present in OpenJPEG releases before 2.3.1. The CVE is tied to OpenJPEG under multiple advisories and Nessus/OpenVAS feeds reference this issue among OpenJPEG 2.3.x and earlier branches. ...

CVE-2018-21010

OpenJPEG before 2.3.1 has a heap buffer overflow in colorapplyiccprofile in bin/common/color.c...

USN-4109-1: OpenJPEG vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that OpenJPEG incorrectly handled certain PGX files. An attacker could possibly use this issue to cause a denial of service or possibly remote code execution. CVE-2017-17480 It was...

Ubuntu 18.04 LTS : OpenJPEG vulnerabilities (USN-4109-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4109-1 advisory. It was discovered that OpenJPEG incorrectly handled certain PGX files. An attacker could possibly use this issue to cause a denial of service or possibly...

USN-4109-1 openjpeg2 vulnerabilities

It was discovered that OpenJPEG incorrectly handled certain PGX files. An attacker could possibly use this issue to cause a denial of service or possibly remote code execution. CVE-2017-17480 It was discovered that OpenJPEG incorrectly handled certain files. An attacker could possibly use this...

NewStart CGSL MAIN 4.05 : openjpeg Multiple Vulnerabilities (NS-SA-2019-0129)

The remote NewStart CGSL host, running version MAIN 4.05, has openjpeg packages installed that are affected by multiple vulnerabilities: - A vulnerability was found in the patch for CVE-2013-6045 for OpenJPEG. A specially crafted JPEG2000 image, when read by an application using OpenJPEG, could...

openjpeg2: Excessive iteration in openjp2/t1.c:opj_t1_encode_cblks can allow for denial of service via crafted BMP file

In OpenJPEG 2.3.0, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file...

Low: Red Hat Enhancement Advisory: openjpeg2 bug fix and enhancement update

An update for openjpeg2 is now available for Red Hat Enterprise Linux 7. OpenJPEG is an open-source JPEG 2000 library. For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes linked from the References section. Users of openjpeg2 are advised to...

The vulnerability of the opj_t1_encode_cblks function in the OpenJPEG image encoding and decoding library for Oracle Solaris allows a attacker to cause a service failure.

The vulnerability of the opjt1encodecblks function in the OpenJPEG image encoding and decoding library for Oracle Solaris is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created BMP file...

Buffer Overflow

OpenJPEG is vulnerable to buffer overflow. This is due to a wrong offset value in opjtcdcodeblockencallocatedata in lib/openjp2/tcd.c. This may lead to denial of service or possibly remote code execution...

Denial Of Service (DoS)

libopenjpeg.so is vulnerable to denial of service DoS. The functions pinextpcrl, pinextcprl, and pinextrpcl in openmj2/pi.c cause Division-by-zero error, leading to an application crash...

OpenJPEG Resource Management Error Vulnerability

OpenJPEG is a C-based open source JPEG2000 codec . A security vulnerability exists in the 'opjt1encodecblks' function in the openjp2/t1.c file in OpenJPEG version 2.3.1. An attacker can exploit this vulnerability to cause a denial of service with a specially crafted bmp file...

OpenJPEG Out-of-Bounds Access Vulnerability

OpenJPEG is an open source JPEG 2000 codec written in C language. An out-of-bounds access vulnerability exists in the pinextlrcp, pinextrlcp, pinextrpcl, pinextrpcl, pinextpcrl, pinextrpcl, and pinextcprl functions in OpenMJ2/pi.c in OpenJPEG 2.3.0 and earlier versions. A remote attacker could...

OpenJPEG De-Zero Vulnerability

OpenJPEG is a C-based open source JPEG2000 codec . OpenJPEG 2.3.0 and earlier versions of the openmj2/pi.c file have a divide-by-zero error vulnerability in the 'pinextpcrl' function, the 'pinextcprl' function, and the ' pinextrpcl' functions have a divide-by-zero error vulnerability. A remote...

OpenJPEG openjp2/pi.c File Integer Overflow Vulnerability

OpenJPEG is a C-based open source JPEG2000 codec . An integer overflow vulnerability exists in the 'opjgetencodingparameters' function in the openjp2/pi.c file in OpenJPEG through 2.3.0 and earlier versions. The vulnerability stems from a network system or product that does not properly validate...

CVE-2019-12973

In OpenJPEG 2.3.1, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616...

DEBIAN-CVE-2018-20847

An improper computation of ptx0, ptx1, pty0 and pty1 in the function opjgetencodingparameters in openjp2/pi.c in OpenJPEG through 2.3.0 can lead to an integer overflow...

CVE-2018-20846

Out-of-bounds accesses in the functions pinextlrcp, pinextrlcp, pinextrpcl, pinextpcrl, pinextrpcl, and pinextcprl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service application crash...

CVE-2018-20846

Out-of-bounds accesses in the functions pinextlrcp, pinextrlcp, pinextrpcl, pinextpcrl, pinextrpcl, and pinextcprl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service application crash...

CVE-2018-20847

An improper computation of ptx0, ptx1, pty0 and pty1 in the function opjgetencodingparameters in openjp2/pi.c in OpenJPEG through 2.3.0 can lead to an integer overflow...