Description
An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool. Converting a specially crafted JPEG2000 file to another format could cause the application to crash or, potentially, disclose some data from the heap.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
The OpenJPEG Project openjpeg
2.1.2affected
References
- https://github.com/uclouvain/openjpeg/issues/862 ↗
- https://security.gentoo.org/glsa/201710-26 ↗
- http://www.securityfocus.com/bid/97073 ↗
- https://github.com/szukw000/openjpeg/commit/7b28bd2b723df6be09fe7791eba33147c1c47d0d ↗
- http://rhn.redhat.com/errata/RHSA-2017-0838.html ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9573 ↗
- https://www.debian.org/security/2017/dsa-3768 ↗