CVE-2018-16375

Name of the Vulnerable Software and Affected Versions OpenJPEG version 2.3.0

Description An issue in OpenJPEG allows for a heap-based buffer overflow due to missing checks for header info.height and header info.width in the pnmtoimage function in bin/jpwl/convert.c.

Recommendations For OpenJPEG version 2.3.0, consider applying checks for header info.height and header info.width in the pnmtoimage function to prevent the heap-based buffer overflow. At the moment, there is no information about a newer version that contains a fix for this issue.