CVE-2016-1923 in OpenJPEG

Sumário (Inglês)

Heap-based buffer overflow in the opj_j2k_update_image_data function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

18/01/2016

Divulgação

27/01/2016

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
80711	OpenJPEG JPEG 2000 Image opj_j2k_update_image_data Excesso de tampão	119	Não definido	Correção oficial	CVE-2016-1923

Fontes

• MITRE
• NVD
• CVE Details