PT-2019-5741

Name of the Vulnerable Software and Affected Versions OpenJPEG version 2.3.1 Description The issue is related to excessive iteration in the opj t1 encode cblks function of openjp2/t1.c. Remote attackers could leverage this to cause a denial of service via a crafted bmp file. Recommendations For...

PT-2018-2956

Name of the Vulnerable Software and Affected Versions OpenJPEG version 2.3.0 Description The issue is related to an integer overflow in the opj t1 encode cblks function, located in openjp2/t1.c. This can be exploited by remote attackers to cause a denial of service using a crafted bmp file...