CVE-2018-14423

Name of the Vulnerable Software and Affected Versions OpenJPEG versions prior to 2.3.0

Description The issue is related to division-by-zero errors in the pi next pcrl, pi next cprl, and pi next rpcl functions in the lib/openjp3d/pi.c file of the OpenJPEG library. This can be exploited by a remote attacker to cause a denial of service, resulting in an application crash.

Recommendations For OpenJPEG versions prior to 2.3.0, update to version 2.3.0 or later to resolve the issue. As a temporary workaround, consider disabling the pi next pcrl, pi next cprl, and pi next rpcl functions until a patch is available.