CVE-2021-29338

Debian Bug report logs - #987276 CVE-2021-29338 Package: src:openjpeg2; Maintainer for src:openjpeg2 is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Tue, 20 Apr 2021 18:39:03 UTC Severity: important Tags: security, upstream Found ...

Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pic in OpenJPEG through 230 allow remote attackers to cause a denial of service (application crash) (CVE-2018-20845) An improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the function opj_get_encoding_parameters in openjp2/pic in Ope ...

Integer Overflow in OpenJPEG v240 allows remote attackers to crash the application, causing a Denial of Service (DoS) This occurs when the attacker uses the command line option "-ImgDir" on a directory that contains 1048576 files ...

There is a flaw in the opj2_compress program in openjpeg2 An attacker who is able to submit a large number of image files to be processed in a directory by opj2_compress, could trigger a heap out-of-bounds write due to an integer overflow, which is caused by the large number of image files The greatest threat posed by this flaw is to confidential ...