Permalink
CVE-2024-56826
5.6 MEDIUM
- CVSS version: 3.1
- Attack vector (AV): LOCAL
- Attack complexity (AC): LOW
- Privileges required (PR): LOW
- User interaction (UI): REQUIRED
- Scope (S): UNCHANGED
- Confidentiality impact (C): LOW
- Integrity impact (I): NONE
- Availability impact (A): HIGH
Openjpeg: heap buffer overflow in bin/common/color.c
A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.
References
Affected products
openjpeg
- *
openjpeg2
- *
gimp:flatpak/openjpeg2
Matching in nixpkgs
pkgs.openjpeg
Open-source JPEG 2000 codec written in C language
pkgs.python311Packages.pylibjpeg-openjpeg
A J2K and JP2 plugin for pylibjpeg
pkgs.python312Packages.pylibjpeg-openjpeg
A J2K and JP2 plugin for pylibjpeg
Package maintainers
-
@codyopel Cody Opel <codyopel@gmail.com>
-
@bcdarwin Ben Darwin <bcdarwin@gmail.com>