An issue was discovered in mj2/opj_mj2_extract.c in OpenJPEG 2.3.0. The output prefix was not checked for length, which could overflow a buffer, when providing a prefix with 50 or more characters on the command line.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade openjpeg2 | Jul 30, 2024 | Mar 2, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade openjpeg-libs | May 2, 2018 | Mar 2, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openjpeg-libs | May 3, 2018 | Mar 2, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade openjpeg-libs | Jun 28, 2018 | Mar 2, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openjpeg-libs | Sep 12, 2019 | Mar 2, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openjpeg2 | Jul 26, 2019 | Mar 2, 2018 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Mar 2, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub