OpenJPEG Denial of Service Vulnerability (CNVD-2019-31375)

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability exists in opjcalloc in the openjp2/opjmalloc.c file in OpenJPEG version 2.3.0. An attacker can exploit this vulnerability to cause a denial of service...

Design/Logic Flaw

The bmpreadinfoheader function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which allows remote attackers to cause a denial of service memory allocation failure in the opjimagecreate function in lib/openjp2/image.c, related to the opjalignedallocn...