Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the opjj2kreadsod function in the bundled OpenJPEG library when processing a malicious JPEG 2000 image. The function writes to tpindex without first verifying that the pointer is non-null and that lcurrenttilepar...

WS-2026-0126

OpenJPEG 2.5.3 and 2.5.4: opjj2kreadsod in src/lib/openjp2/j2k.c writes to the tile-part index array tpindexcurrenttilepart without a bounds check when a valid TLM marker causes readsot to skip resizing it, so a crafted JPEG 2000 codestream triggers a heap buffer overflow write while decoding...