CVE-2018-20847

Name of the Vulnerable Software and Affected Versions OpenJPEG versions prior to 2.3.0

Description The issue is related to an improper computation in the opj get encoding parameters function, which can lead to an integer overflow. This can potentially allow a remote attacker to access confidential data, compromise data integrity, and cause a denial of service.

Recommendations For versions prior to 2.3.0, update to version 2.3.0 or later to resolve the issue. At the moment, there is no information about other mitigation measures for this vulnerability.