CVE-2018-5727

Name of the Vulnerable Software and Affected Versions OpenJPEG version 2.3.0

Description The issue is related to an integer overflow in the opj t1 encode cblks function, located in openjp2/t1.c. This can be exploited by remote attackers to cause a denial of service using a crafted bmp file.

Recommendations For OpenJPEG version 2.3.0, consider applying a patch or fix that addresses the integer overflow in the opj t1 encode cblks function to prevent denial of service attacks. As a temporary workaround, consider restricting the processing of crafted bmp files until a patch is available.