Most recent entries from all

CVE-2024-56826 — Openjpeg: heap buffer overflow in bin/common/color.c

Affected: openjpeg, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.

USN-7223-1 — openjpeg2 vulnerabilities

Affected: Ubuntu:Pro:16.04:LTS: openjpeg2, Ubuntu:Pro:18.04:LTS: openjpeg2, Ubuntu:20.04:LTS: openjpeg2, Ubuntu:22.04:LTS: openjpeg2, Ubuntu:24.04:LTS: openjpeg2

Frank Zeng discovered that OpenJPEG incorrectly handled memory when using the decompression utility. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2024-56826, CVE-2024-56827)