CVE-2020-6851

OpenJPEG vulnerability CVE-2020-6851 affects OpenJPEG 2.3.1 and older, with a heap-based buffer overflow in opj_t1_clbl_decode_processor (openjp2/t1.c) due to missing validation of opj_j2k_update_image_dimensions. Affected versions before 2.4.0 are at risk of arbitrary code execution or crash; ex...

CVE-2018-6616

OpenJPEG is affected by CVE-2018-6616 (and related) due to excessive iteration in opj_t1_encode_cblks (openjp2/t1.c), enabling DoS via crafted BMP files. Public details reference OpenJPEG 2.3.0/2.3.1 and similar advisories indicating this weakness in the t1.c path. Upstream fixes are reported in ...