CVE-2017-14041

Name of the Vulnerable Software and Affected Versions OpenJPEG version 2.2.0

Description A stack-based buffer overflow was discovered in the pgxtoimage function in bin/jp2/convert.c. This issue causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution.

Recommendations For OpenJPEG version 2.2.0, consider disabling the pgxtoimage function as a temporary workaround until a patch is available. Restrict access to the convert.c module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.