PT-2026-32447 · Uclouvain+2 · Openjpeg+2
CVSS v3.1
3.3
Low
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L |
Name of the Vulnerable Software and Affected Versions
uclouvain openjpeg versions prior to 2.5.5
Description
An integer overflow occurs in the
opj pi initialise encode() function within the src/lib/openjp2/pi.c library. This issue requires local access to be exploited.Recommendations
Install the patch identified as 839936aa33eb8899bbbd80fda02796bb65068951 for versions prior to 2.5.5.
Exploit
Fix
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linuxmint
Ubuntu
Openjpeg