An issue was discovered in OpenJPEG 2.3.0. Missing checks for header_info.height and header_info.width in the function pnmtoimage in bin/jpwl/convert.c can lead to a heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade openjpeg2 | May 15, 2025 | Sep 3, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openjpeg-libs | Sep 16, 2021 | Sep 3, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade openjpeg-libs | Apr 30, 2021 | Sep 3, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openjpeg-libs | Mar 24, 2021 | Sep 3, 2018 |
| Oracle Solaris | — | Upgrade image/library/openjpeg2 to version 2.3.0-11.4.7.0.1.2.0 on Solaris 11.4 | Mar 20, 2019 | Sep 2, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 3, 2018 |
| Suse | — | Upgrade libopenjp2-7Upgrade libopenjp2-7-32bitUpgrade openjpeg2-develUpgrade openjpeg2 | Aug 9, 2024 | Sep 3, 2018 |
| Ubuntu | — | Upgrade libopenjp2-7 (Ubuntu Pro) | Mar 22, 2023 | Sep 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub