CVE-2021-29338

Name of the Vulnerable Software and Affected Versions OpenJPEG version 2.4.0

Description The issue is related to an integer overflow in OpenJPEG, which can be triggered by a remote attacker using the command line option "-ImgDir" on a directory containing a large number of files, specifically 1048576 files. This can cause the application to crash, resulting in a Denial of Service (DoS). The vulnerability is associated with incorrect handling of a directory with a large number of files.

Recommendations For OpenJPEG version 2.4.0, consider avoiding the use of the "-ImgDir" command line option on directories with a large number of files until a patch is available. As a temporary workaround, restrict the number of files in the directory to prevent the integer overflow. At the moment, there is no information about a newer version that contains a fix for this vulnerability.