Out-of-bounds Write

Affecting openjpeg2 package, versions *

Overview

Affected versions of this package are vulnerable to Out-of-bounds Write. There's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker is able to provide crafted input to be processed by the openjpeg encoder, this could cause an out-of-bounds read. The greatest impact from this flaw is to application availability.

Remediation

There is no fixed version for openjpeg2.

References

• ADVISORY
• FEDORA
• GENTOO
• MISC
• MLIST