6.8
CVSSv2

CVE-2018-16375

Published: 03/09/2018 Updated: 26/01/2021
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

An issue exists in OpenJPEG 2.3.0. Missing checks for header_info.height and header_info.width in the function pnmtoimage in bin/jpwl/convert.c can lead to a heap-based buffer overflow.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

uclouvain openjpeg 2.3.0

Vendor Advisories

An issue was discovered in OpenJPEG 230 Missing checks for header_infoheight and header_infowidth in the function pnmtoimage in bin/jpwl/convertc can lead to a heap-based buffer overflow ...